Malicious IPs in Thailand

IPv4 networks located in Thailand that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
117
#31 of 176 countries
Per million allocated IPv4
13.1
#33 of 77 countries
Flagged IPv4 addresses
128
ranges count at most as a /24
Allocated IPv4 addresses
8,933,120
RIR delegation statistics

Thailand at a glance

Thailand had 117 flagged IPv4 networks in the snapshot of 2026-10-10, rank #31 of 176 countries by absolute count. Relative to its allocated IPv4 space that is 13.1 flagged networks per million addresses, rank #33 of 77, close to the median of 10.6 across all rated countries. The largest category is brute force sources with 58% of the flagged networks, followed by other malicious networks (20%). The three networks (ASNs) with the most flagged IPs hold 33% of them, led by AWN-CO-LTD-AS-AP Advanced Wireless Network Company Limited (AS45758). Another 3 flagged IPv6 networks are located in Thailand.

Malicious activity in Thailand by category

A network listed in several categories counts once, in the most specific one. Also flagged: 3 IPv6 networks.

  • Brute force sources in Thailand

    68 (58%)

    68 flagged networks, #31 of 159 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Other malicious networks in Thailand

    23 (20%)

    23 flagged networks, #29 of 147 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Botnet hosts in Thailand

    9 (8%)

    9 flagged networks, #37 of 126 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Spam sources in Thailand

    8 (7%)

    8 flagged networks, #21 of 85 countries for spam sources. Sources of email spam. Spam Sources by Country

  • C2 servers in Thailand

    5 (4%)

    5 flagged networks, #18 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country

  • Scanners in Thailand

    4 (3%)

    4 flagged networks, #20 of 44 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country

Networks with the most flagged IPs in Thailand

Autonomous systems announcing the flagged networks located in Thailand.

#NetworkFlagged networks
1AS45758AWN-CO-LTD-AS-AP Advanced Wireless Network Company Limited18
2AS23969TOT-NET TOT Public Company Limited13
3AS17552TRUEONLINE-AS-AP True Online8
4AS45102ALIBABA-CN-NET Alibaba US Technology Co., Ltd.6
5AS133481AIS-FIBRE-AS-AP AIS Fibre6
6AS135377UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED6
7AS4618INET-TH-AS Internet Thailand Company Limited5
8AS9891CSLOX-IDC-AS-AP CS LOXINFO Public Company Limited.5
9AS7470TRUEINTERNET-AS-AP TRUE INTERNET Co.,Ltd.4
10AS19527GOOGLE-2 - Google LLC4

Compare Thailand with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Thailand by rate

#CountryNetworksPer million
31United Arab Emirates10013.6
32Ecuador3613.2
33Thailand11713.1
34Brazil93311.4
35Peru3611.1
36Russia50211.1

Other countries in the APNIC region

#CountryNetworksPer million
3Bangladesh16679.5
4Pakistan42574.8
5Nepal4170.0
8Sri Lanka2646.1
9India1,77742.3
11Hong Kong SAR China50031.0
12Philippines18830.0
21Indonesia40821.0

Questions about Thailand

How many malicious IP addresses are there in Thailand?
On 2026-10-10, 117 IPv4 networks (/24 blocks) located in Thailand were flagged for malicious activity, with 128 listed IPv4 addresses and 3 IPv6 networks. Each /24 counts once, however many of its addresses are listed.
Which networks in Thailand host the most flagged IPs?
AWN-CO-LTD-AS-AP Advanced Wireless Network Company Limited (AS45758, 18 networks), TOT-NET TOT Public Company Limited (AS23969, 13 networks), TRUEONLINE-AS-AP True Online (AS17552, 8 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Thailand or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Thailand