Substantial Risk
Threat level 8/10 for 41.79.97.5 based on 18 documented incidents.
Consistent suspicious behavior patterns. 100% confidence rating.
More threatening than 90% of monitored IPs
IP Address
41.79.97.5
IPv4
Public
GH
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Ghana
Location
Ashesi University College
ASN 37373
18
Reports
Mixed
Data Source
Threat Categories
Brute-Force
17
Web App Attack
12
WP Login Brute Force
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
17. September 2026
Last Activity
28. September 2026
Recent (7 days)
5 incidents
Reputable Network
This IP is hosted on a network (ASN 37373) with generally good reputation. The ISP Ashesi University College maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
100%
Verified
Confidence History
6. Aug 2026 - 28. Sep 2026
100%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 41.79.97.5
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
GH
- ASN
- AS37373
- ISP
- Ashesi University College
DNS Information
- Reverse DNS
- connect.ashesi.edu.gh
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 6 Aug 2026
- Last Reported
- 28 Sep 2026, 02:46
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 806,268 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
18
avg: 9
++
Network Comparison
Compared against 2 IPs in ASN 37373
Threat Level
8/10
network avg: 7.5
=
Total Reports
18
network avg: 10
++
Geographic Comparison
Compared against 624 IPs in GH
Threat Level
8/10
country avg: 6.3
+
Total Reports
18
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
22 Sep 2026
3 reports
Daily Average
0.3
reports/day
Most Active
Friday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
17
Web App Attack
12
WP Login Brute Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 16:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
733,188 threat incidents tracked globally • Last 24h: 28,825 Logs
FEED
Top Threat Sources
-
01
United States143,190 19.5% -
02
Brazil110,727 15.1%
-
03
India82,109 11.2%
-
04
China44,727 6.1%
-
05
SC29,233 4%
-
06
Germany17,474 2.4%
-
07
Netherlands17,459 2.4%
-
08
Pakistan16,628 2.3%
-
09
Argentina16,188 2.2%
-
10
Colombia15,132 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
7/10
Avg Threat
5%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
5%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
77%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
102.221.31.52
8/10
Confidence
99%
Reports
12
ISP
Broadspectrum L...
102.223.92.101
10/10
Confidence
91%
Reports
30
ISP
Koforidua-Techn...
102.221.31.35
10/10
Confidence
88%
Reports
12
ISP
Broadspectrum L...
80.87.83.229
10/10
Confidence
83%
Reports
79
ISP
VODAFONE GHANA ...
41.242.115.84
10/10
Confidence
82%
Reports
129
ISP
Dolphin-Telecom-AS
41.242.115.83
10/10
Confidence
81%
Reports
126
ISP
Dolphin-Telecom-AS
41.204.63.118
10/10
Confidence
80%
Reports
56
ISP
VODAFONE GHANA ...
102.201.253.238
8/10
Confidence
78%
Reports
9
ISP
Emmlink Technol...
197.159.139.180
10/10
Confidence
73%
Reports
10
ISP
Comsys (GH) Lim...
102.221.31.49
10/10
Confidence
72%
Reports
7
ISP
Broadspectrum L...
102.176.82.190
8/10
Confidence
70%
Reports
35
ISP
VODAFONE GHANA ...
102.221.31.57
10/10
Confidence
70%
Reports
6
ISP
Broadspectrum L...
154.160.16.93
8/10
Confidence
67%
Reports
7
ISP
Scancom Limited
154.160.96.210
8/10
Confidence
62%
Reports
7
ISP
SCANCOM
102.201.253.236
8/10
Confidence
61%
Reports
6
ISP
Emmlink Technol...
IPs with similar threat level and confidence scores.
15
Related IPs
9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.177.179.195
10/10
Confidence
100%
Reports
925
Location
TW
TW
213.209.159.208
10/10
Confidence
100%
Reports
803
Location
DE
DE
195.178.110.227
10/10
Confidence
100%
Reports
402
Location
BG
BG
136.92.16.48
8/10
Confidence
100%
Reports
231
Location
DE
DE
136.90.54.236
8/10
Confidence
100%
Reports
216
Location
US
US
2.57.122.150
10/10
Confidence
100%
Reports
202
Location
RO
RO
185.177.72.128
10/10
Confidence
100%
Reports
165
Location
FR
FR
210.87.97.90
10/10
Confidence
100%
Reports
152
Location
ID
ID
136.90.53.160
8/10
Confidence
100%
Reports
138
Location
US
US
136.90.48.99
8/10
Confidence
100%
Reports
136
Location
US
US
103.154.81.166
10/10
Confidence
100%
Reports
132
Location
ID
ID
136.90.54.222
8/10
Confidence
100%
Reports
130
Location
US
US
80.94.92.237
7/10
Confidence
100%
Reports
126
Location
RO
RO
160.22.240.235
10/10
Confidence
100%
Reports
126
Location
ID
ID
146.148.121.136
8/10
Confidence
100%
Reports
123
Location
BE
BE