Is 41.139.47.238 malicious?
IP reputation report for 41.139.47.238: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.
41.139.47.238 is flagged as malicious
Detected by 25 threat intelligence sources in the isMalicious dataset — review before trusting this IP.
Threat verdict
VerdictMalicious
Flagged malicious by the aggregated reputation verdict.
Blocklist detections25 sources
Suspicious signals2
Categoriesbruteforce, malware, phishing, attack, suspicious, malicious, botnet, attacks, c2
Confidence score100/100
Aggregated confidence across the sources reporting this indicator.
Last updated2026-07-09
Network & location
LocationAccra, Greater Accra Region, Ghana
ISPTELEDATAICT
ASNAS35091 — Teledata, Ghana
Network41.139.44.0/22
CompanyTeledata ICT Ltd
Security posture
Open ports443, 10123
Associated CVEs
Detections
- POP3 Gropersbruteforce
- T145 - Black Mirror IPv4 Blocklistmalware
- Bitwire - Inbound Blocklistmalware
- Romain Marcoux - Malicious IPsphishing
- Blocklist - All Attacks (48h)attack
- Blocklist - All Mail attacks (48h)attack
- Ultimate Hosts Blacklist - Blocklist.demalware
- ThreatHive - Hive Blocklist
- Opendbl Net - Blocklistde All.listmalware
- Blocklist - All IMAP attacks (1h)attack
- IPsum Level 1suspicious
- IPsum – malicious IP feedmalware
- Romain Marcoux - Malicious Outgoing IPsphishing
- Threatview IP Blocklistmalicious
- Malware-Filter - Botnet Filter IPsbotnet
- Bitwire - Outbound Blocklistmalware
- Malware-Filter - Botnet Filterbotnet
- bitwire‑it IP blocklist – bad IPs updated every 2hmalware
- FireHOL - Blocklist Deattack
- FireHOL - Blocklist De Mailattack
- FireHOL - Firehol Level2attack
- FireHOL blocklist.de – fail2ban offendersattacks
- FireHOL - Blocklist De Imapattack
- IPsum - Malicious IPsmalware
+1 more sources in the full report.