Thailand (TH) Threat Intelligence

TH

Thailand has 44,978 malicious IP addresses with 1,916,606 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, severe abuse. Top attacking networks: TOT Public Company Limited (19,786 IPs), Triple T Broadband Public Company Limited (6,204 IPs), AIS Fibre (3,350 IPs). Data collected since 2022-10-17, last activity 2026-10-12.

Threat Assessment: Thailand shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by TOT Public Company Limited and Triple T Broadband Public Company Limited.

Total Reports
1,916,606
Unique IPs
44,978
First Seen
2022-10-17
Last Activity
2026-10-12

Top Threat Categories

Tcp Scan 118,397
Suspicious Activity 113,381
High Threat 48,803
Malware Distribution 22,149
Severe Abuse 7,486

Top Attacking Networks

AS23969 TOT Public Company Limited
19,786 IPs
AS45758 Triple T Broadband Public Company Limited
6,204 IPs
AS133481 AIS Fibre
3,350 IPs

Most Reported IPs in Thailand

203.154.158.195 1,626 reports
147.50.231.135 1,483 reports
147.50.103.212 1,470 reports
49.231.192.36 1,450 reports
147.50.227.79 1,442 reports

Access this data via API

Get Thailand threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/TH

View full API documentation

See how we classify and verify threats →

Check any IP from Thailand

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS23969 Intelligence AS45758 Intelligence AS133481 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...