🇹🇭 Thailand: live cyber threat activity
Malicious IPs, malware and ransomware victims in Thailand.
252Malicious IPs listed#30 of 182 countries · 0.38% of the world
28New in the last 24hfirst seen by any feed
58Reported by 2+ feedsindependent sources agree
7Ransomware victimsposted in the last 30 days
View Thailand on the live map →All listed IPs in ThailandRansomware victims in Thailand
Newly listed, last 30 days
IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.
2026-09-13 – 2026-10-12 (UTC)
What it is
Listed IPs by role.
By state or region
By city
Networks hosting the most
| Network | IPs |
|---|---|
| AS23969 TOT Public Company Limited | 79 |
| AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 62 |
| AS45758 ADVANCED WIRELESS NETWORK COMPANY LIMITED | 22 |
| AS133481 ADVANCED WIRELESS NETWORK COMPANY LIMITED | 9 |
| AS17552 TRUE INTERNET CORPORATION CO. LTD. | 6 |
| AS7470 TRUE INTERNET CORPORATION CO. LTD. | 6 |
| AS9891 CS Loxinfo Public Company Limited | 6 |
| AS23974 Ministry of Education - EMISC | 5 |
| AS56067 Metrabyte Co.,Ltd | 5 |
| AS142299 CLOUDFOREST CO.,LTD | 5 |
| AS45102 Alibaba (US) Technology Co., Ltd. | 5 |
| AS135161 GMO-Z.COM PTE. LTD. | 4 |
| AS9335 National Telecom Public Company Limited | 4 |
| AS45458 ADVANCED WIRELESS NETWORK COMPANY LIMITED | 3 |
| AS147176 NZ Network Enterprise Co., Ltd. | 3 |
Malware families served from Thailand
Most recently reported
| IP | Role | Family / threat | Where | Network | Reported by | Last reported (UTC) |
|---|---|---|---|---|---|---|
| 27.130.123[.]168 | Attacker | Attacking host | Bangkok, Bangkok | AS133481 ADVANCED WIRELESS NETWORK COMPANY LIMITED | 1 feed | 2026-10-12 07:50 |
| 1.2.225[.]235 | Attacker | Attacking host | Nang Rong, Buriram | AS23969 TOT Public Company Limited | 1 feed | 2026-10-12 05:35 |
| 171.100.242[.]107 | Attacker | Attacking host | Din Daeng, Bangkok | AS7470 TRUE INTERNET CORPORATION CO. LTD. | 1 feed | 2026-10-12 04:50 |
| 1.2.239[.]175 | Attacker | Attacking host | Chiang Mai, Chiang Mai | AS23969 TOT Public Company Limited | 2 feeds | 2026-10-12 04:35 |
| 1.20.173[.]155 | Attacker | Attacking host | Pattaya, Chon Buri | AS23969 TOT Public Company Limited | 2 feeds | 2026-10-12 04:35 |
| 101.108.150[.]73 | Malware | Malicious IP | Godown, Bangkok | AS23969 TOT Public Company Limited | 1 feed | 2026-10-12 04:35 |
| 113.53.69[.]164 | Malware | Malicious IP | Khwaeng Thung Song Hong, Bangkok | AS23974 Ministry of Education - EMISC | 1 feed | 2026-10-12 04:35 |
| 113.53.69[.]165 | Malware | Malicious IP | Khwaeng Thung Song Hong, Bangkok | AS23974 Ministry of Education - EMISC | 1 feed | 2026-10-12 04:35 |
| 122.155.165[.]69 | Attacker | Attacking host | Khwaeng Thung Song Hong, Bangkok | AS9335 National Telecom Public Company Limited | 2 feeds | 2026-10-12 04:35 |
| 124.120.0[.]93 | Attacker | Attacking host | Thung Khru, Bangkok | AS17552 TRUE INTERNET CORPORATION CO. LTD. | 2 feeds | 2026-10-12 04:35 |
| 150.109.180[.]208 | Attacker | Attacking host | Bangkok, Bangkok | AS132203 Shenzhen Tencent Computer Systems Company Limited | 2 feeds | 2026-10-12 04:35 |
| 223.204.246[.]117 | Attacker | Malicious IP | Pattaya, Chon Buri | AS45758 ADVANCED WIRELESS NETWORK COMPANY LIMITED | 1 feed | 2026-10-12 04:35 |
| 27.130.169[.]144 | Attacker | Attacking host | Wang Thong, Phitsanulok | AS133481 ADVANCED WIRELESS NETWORK COMPANY LIMITED | 2 feeds | 2026-10-12 04:35 |
| 43.133.99[.]204 | Attacker | Attacking host | Bangkok, Bangkok | AS132203 Shenzhen Tencent Computer Systems Company Limited | 2 feeds | 2026-10-12 04:35 |
| 58.10.5[.]222 | Attacker | Attacking host | Pattaya, Chon Buri | AS17552 TRUE INTERNET CORPORATION CO. LTD. | 2 feeds | 2026-10-12 04:35 |
| 58.136.209[.]26 | Attacker | Attacking host | Thon Buri, Bangkok | AS133481 ADVANCED WIRELESS NETWORK COMPANY LIMITED | 2 feeds | 2026-10-12 04:35 |
| 58.8.206[.]239 | Attacker | Attacking host | Bang Bua Thong, Nonthaburi | AS17552 TRUE INTERNET CORPORATION CO. LTD. | 2 feeds | 2026-10-12 04:35 |
| 202.129.16[.]119 | Malware | Malicious URL | Khwaeng Thung Song Hong, Bangkok | AS9931 National Telecom Public Company Limited | aggregated list | 2026-10-12 04:35 |
| 45.141.27[.]27 | Malware | XWorm | Bang Rak, Bangkok | AS142299 CLOUDFOREST CO.,LTD | aggregated list | 2026-10-12 04:35 |
| 202.183.243[.]94 | Attacker | Attacking host | Huai Khwang, Bangkok | AS4750 CS Loxinfo Public Company Limited | 3 feeds | 2026-10-12 04:35 |
| 118.174.57[.]129 | Attacker | On multiple blocklists | Pak Kret, Nonthaburi | AS23969 TOT Public Company Limited | aggregated list | 2026-10-12 04:35 |
| 165.154.119[.]158 | Attacker | Attacking host | Bangkok, Bangkok | AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 1 feed | 2026-10-12 04:35 |
| 180.180.242[.]93 | Attacker | Attacking host | Khwaeng Thung Song Hong, Bangkok | AS134166 Internet Data Center Service | 1 feed | 2026-10-12 04:35 |
| 58.136.25[.]136 | Attacker | On multiple blocklists | Din Daeng, Bangkok | AS133481 ADVANCED WIRELESS NETWORK COMPANY LIMITED | aggregated list | 2026-10-12 04:35 |
| 119.59.97[.]237 | Malware | W97m | Bang Rak, Bangkok | AS56067 Metrabyte Co.,Ltd | 1 feed · 21 sandbox samples | 2026-10-12 03:30 |
Ransomware victims in Thailand
7 posted in the last 30 days, 24 in 90.
Sectors hit (30 days)
Groups (30 days)
| Posted (UTC) | Victim | Group | Sector |
|---|---|---|---|
| 2026-10-10 20:30 | Royal Thai Air Force | thegentlemen | Government & Defense |
| 2026-10-05 15:09 | Asia Era One | qilin | — |
| 2026-10-02 21:04 | Thai Lion Air | qilin | Transportation |
| 2026-09-24 09:58 | Elite Industech Co., Ltd | dragonforce | Manufacturing |
| 2026-09-23 14:40 | DAD-CO.TH | clop | Other |
| 2026-09-20 12:14 | ShopDunk | qilin | Retail & E-Commerce |
| 2026-09-15 07:10 | Technical Asia | thegentlemen | Technology |
| 2026-09-02 16:54 | PTT Oil and Retail Business | direwolf | Energy & Utilities |
| 2026-09-01 08:59 | orex.co.th | krybit | Other |
| 2026-08-30 09:52 | SUNSEA | thegentlemen | Other |
| 2026-08-30 09:51 | Thai Film Industries PCL | thegentlemen | Other |
| 2026-08-27 06:28 | Jgsee | medusalocker | — |
| 2026-08-20 14:37 | AYUDHYA TH Insurance | DYSPHOR1A | Financial Services |
| 2026-08-20 14:37 | GUSTO College GLMS | DYSPHOR1A | Education |
| 2026-08-19 15:57 | sunsea.co.th | krybit | Other |
Other countries
🇺🇸 United States 17,807🇨🇳 China 10,752🇩🇪 Germany 4,042🇬🇧 United Kingdom 3,668🇷🇺 Russia 3,582🇳🇱 Netherlands 2,247🇮🇳 India 2,068🇫🇷 France 1,538🇧🇷 Brazil 1,416🇸🇬 Singapore 1,330🇭🇰 Hong Kong 1,319🇰🇷 South Korea 1,306🇮🇩 Indonesia 1,189🇵🇰 Pakistan 880🇨🇦 Canada 867🇧🇪 Belgium 726🇯🇵 Japan 704🇺🇦 Ukraine 671🇵🇱 Poland 560🇿🇦 South Africa 557🇻🇳 Vietnam 546🇲🇾 Malaysia 523🇮🇹 Italy 405🇸🇪 Sweden 378All countries →