‘AI Spera’ Provides Free VPN IP Dataset from Hong Kong and Thailand with Risk of IP Misuse

Cyber Threat Intelligence (CTI) specialist company ‘AI Spera’ announced on the 14th that it will provide VPN IP address data from Hong Kong and Thailand?where account takeover, credential stuffing, and unauthorized access have been rapidly increasing?to businesses and institutions free of charge.

AI Spera offers data from Hong Kong and Thailand among billions of VPN IP addresses held by its proprietary CTI search engine, ‘Criminal IP’.

The VPN IP data from Hong Kong and Thailand provided by AI Spera represent countries showing the most overwhelming growth in VPN IP addresses over the past 3-4 years. According to data provided by AI Spera, approximately 360,000 VPN IP addresses were added in Hong Kong between 2020 and 2021, while about 800,000 VPN IP addresses were added in Thailand.

AI Spera stated that for such countries, close monitoring is necessary when access attempts come from these IP addresses, and intrusion detection and control strategies may need to be reviewed.

In particular, since the VPN IP address database already includes IP addresses with a history of ransomware and account takeover incidents, utilizing this IP intelligence database can be effectively used for overall cyberattack defense.

Additionally, some overseas organizations sell VPN IP address databases at high prices, making it difficult for companies to obtain such databases and thus challenging to verify VPN IP addresses despite wanting to improve security processes. However, by using this free database, companies can pilot VPN IP address verification processes and expand the scope of attack detection.

An AI Spera representative explained, “Although many are aware that cyber threats can arise from IP addresses using VPNs, it remains difficult to secure real-time databases for continuously changing addresses,” adding, “Moreover, there is a growing need for close monitoring of IP addresses from countries like Hong Kong, Thailand, and Vietnam, and the VPN IP address verification field should be expanded within existing corporate security processes,” explaining the background for providing the data free of charge.