🇬🇭 Ghana: live cyber threat activity
Malicious IPs, malware and ransomware victims in Ghana.
76Malicious IPs listed#53 of 182 countries · 0.11% of the world
7New in the last 24hfirst seen by any feed
33Reported by 2+ feedsindependent sources agree
0Ransomware victimsposted in the last 30 days
View Ghana on the live map →All listed IPs in GhanaRansomware victims in Ghana
Newly listed, last 30 days
IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.
2026-09-13 – 2026-10-12 (UTC)
What it is
Listed IPs by role.
By state or region
By city
Networks hosting the most
| Network | IPs |
|---|---|
| AS35091 Teledata, Ghana | 60 |
| AS29614 VODAFONE GHANA AS INTERNATIONAL TRANSIT | 5 |
| AS37613 DOLPHIN TELECOMMUNICATION LIMITED | 2 |
| AS328261 E-Connecta Limited | 1 |
| AS329009 Spectrum Internet Service Ltd | 1 |
| AS328797 Broadspectrum Limited | 1 |
| AS328494 3D WIRELESS PLUS LIMITED | 1 |
| AS328212 THE UNIVERSITY OF CAPE COAST | 1 |
| AS33786 K-Net | 1 |
| AS327814 Ecoband Ltd | 1 |
| AS14593 Space Exploration Technologies Corporation | 1 |
| AS37373 Ashesi University College | 1 |
Malware families served from Ghana
Most recently reported
| IP | Role | Family / threat | Where | Network | Reported by | Last reported (UTC) |
|---|---|---|---|---|---|---|
| 41.139.0[.]146 | Attacker | Attacking host | Accra, Greater Accra | AS35091 Teledata, Ghana | 2 feeds | 2026-10-12 04:35 |
| 41.139.18[.]245 | Attacker | Attacking host | Ashaiman, Greater Accra | AS35091 Teledata, Ghana | 2 feeds | 2026-10-12 04:35 |
| 41.139.5[.]203 | Attacker | Attacking host | Medina Estates, Greater Accra | AS35091 Teledata, Ghana | 2 feeds | 2026-10-12 04:35 |
| 41.139.9[.]9 | Attacker | Attacking host | Accra, Greater Accra | AS35091 Teledata, Ghana | 2 feeds | 2026-10-12 04:35 |
| 41.211.16[.]117 | Attacker | Attacking host | Accra, Greater Accra | AS35091 Teledata, Ghana | 2 feeds | 2026-10-12 04:35 |
| 41.211.4[.]227 | Attacker | Attacking host | Adenta, Greater Accra | AS35091 Teledata, Ghana | 1 feed | 2026-10-12 00:15 |
| 41.139.5[.]81 | Attacker | Attacking host | Medina Estates, Greater Accra | AS35091 Teledata, Ghana | 1 feed | 2026-10-11 18:41 |
| 102.176.82[.]190 | Attacker | Attacking host | Esim, Western | AS29614 VODAFONE GHANA AS INTERNATIONAL TRANSIT | 2 feeds | 2026-10-11 04:31 |
| 156.38.121[.]40 | Attacker | Attacking host | Cape Coast, Central | AS328212 THE UNIVERSITY OF CAPE COAST | 2 feeds | 2026-10-11 04:31 |
| 2605[:]59c0[:]1f34[:]2e08[:]5d1e[:]b33a[:]ca9f[:]13f | Attacker | Attacking host | Accra, Greater Accra | AS14593 Space Exploration Technologies Corporation | 2 feeds | 2026-10-11 04:31 |
| 41.139.10[.]75 | Attacker | Attacking host | Adenta, Greater Accra | AS35091 Teledata, Ghana | 2 feeds | 2026-10-11 04:31 |
| 41.139.18[.]99 | Attacker | Malicious IP | Ashaiman, Greater Accra | AS35091 Teledata, Ghana | 1 feed | 2026-10-11 04:31 |
| 41.139.37[.]221 | Attacker | Attacking host | Accra, Greater Accra | AS35091 Teledata, Ghana | 2 feeds | 2026-10-11 04:31 |
| 41.139.4[.]79 | Attacker | Malicious IP | Accra, Greater Accra | AS35091 Teledata, Ghana | 1 feed | 2026-10-11 04:31 |
| 41.139.44[.]8 | Attacker | Malicious IP | Tema, Greater Accra | AS35091 Teledata, Ghana | 1 feed | 2026-10-11 04:31 |
| 41.139.47[.]133 | Attacker | Attacking host | Accra, Greater Accra | AS35091 Teledata, Ghana | 2 feeds | 2026-10-11 04:31 |
| 41.139.47[.]190 | Attacker | Malicious IP | Accra, Greater Accra | AS35091 Teledata, Ghana | 1 feed | 2026-10-11 04:31 |
| 41.139.47[.]193 | Attacker | Malicious IP | Accra, Greater Accra | AS35091 Teledata, Ghana | 1 feed | 2026-10-11 04:31 |
| 41.211.16[.]124 | Attacker | Malicious IP | Accra, Greater Accra | AS35091 Teledata, Ghana | 1 feed | 2026-10-11 04:31 |
| 41.211.21[.]6 | Attacker | Malicious IP | Accra, Greater Accra | AS35091 Teledata, Ghana | 1 feed | 2026-10-11 04:31 |
| 197.251.193[.]234 | Attacker | On multiple blocklists | Medina Estates, Greater Accra | AS29614 VODAFONE GHANA AS INTERNATIONAL TRANSIT | 1 feed | 2026-10-11 04:31 |
| 102.69.222[.]30 | Attacker | Attacking host | Aburi, Eastern | AS328494 3D WIRELESS PLUS LIMITED | 1 feed | 2026-10-10 14:35 |
| 102.176.106[.]26 | Attacker | Malicious IP | Accra, Greater Accra | AS29614 VODAFONE GHANA AS INTERNATIONAL TRANSIT | 1 feed | 2026-10-10 04:30 |
| 41.139.16[.]61 | Attacker | Attacking host | Medina Estates, Greater Accra | AS35091 Teledata, Ghana | 2 feeds | 2026-10-10 04:30 |
| 41.211.4[.]225 | Attacker | Attacking host | Adenta, Greater Accra | AS35091 Teledata, Ghana | 1 feed | 2026-10-09 07:45 |
Ransomware victims in Ghana
0 posted in the last 30 days, 1 in 90.
Sectors hit (30 days)
Groups (30 days)
| Posted (UTC) | Victim | Group | Sector |
|---|---|---|---|
| 2026-08-27 06:27 | Hungry Lion | medusalocker | Retail & E-Commerce |
Other countries
🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →