Autonomous system
AS9587 DTACNETWORK-TH-AP 26th Floor 3333 Moo 14 Chai Building
Mobile APNIC Cable/DSL/ISP
Summary
dtac (Total Access Communication) — now part of True Corporation
mobile isp residential legacy
AS9587 (DTACNETWORK-TH-AP) belongs to the network arm of dtac, Total Access Communication, the Thai mobile operator long associated with Norway's Telenor. The registry record shows only a Bangkok street address rather than a company name, which is a common registration quirk and not a sign of anything unusual. dtac merged with True Corporation in 2023, creating Thailand's largest mobile operator; the merged group retained the True brand, and this AS is a legacy of the dtac side of that estate.
What it's used for
This is a mobile access network and the numbers say so unambiguously. RIS observes 75 IPv4 prefixes carrying 136,448 addresses and a substantial 40 IPv6 prefixes, against only 11 BGP neighbours. That combination, a very large address pool with a small number of peers, is the definition of an eyeball network: it terminates its own subscribers and buys transit, rather than carrying other people's traffic. The IPv4 space is dominated by two large mobile-scale blocks, 111.84.0.0/16 and 115.67.0.0/16, announced both whole and deaggregated down to /17s, /18s, /20s and /22s. That deaggregation is normal for a cellular carrier, which splits its pool by region and by gateway so that subscriber sessions anchor near the right packet gateway.
Notable
- The IPv6 build is serious. Forty prefixes under
2404:8d02::/32, including a/36and many/48s, is the shape of an operator that has actually rolled IPv6 out to handsets rather than reserving it on paper. - 136,448 public IPv4 addresses is far too few for the subscriber count of a national mobile operator, which means the great majority of handsets sit behind carrier-grade NAT. Expect many distinct users behind any single address in this AS.
- Following the merger, traffic in this AS is best read as belonging to the combined True/dtac mobile network even though the AS retains the dtac name.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-10, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 88 prefixes · 124K addresses IPv6 153 prefixes
| Country | Name | Prefixes |
|---|---|---|
| TH | Thailand | 241 |
Registry
Allocation record
- Registry
- APNIC
- Handle
AS9587- Registry name
- REALFUTURE-AS-AP
- Registrant
- True Move Company Limited
- Abuse contact
- peering@truecorp.co.th
- Registered
- 2026-10-08
- Last changed
- 2026-10-08
- Allocation
- allocated
Declared
PeeringDB profile
- Name
- DTAC ISP
- Network type
- Cable/DSL/ISP
- Scope
- Not Disclosed
- Traffic ratio
- Mostly Inbound
- Peering policy
- Open
- IRR as-set
AS9587:AS-ALL- Present at
- 1 exchanges
- Facilities
- 5 facilities
- Website
- http://www.dtac.co.th
PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.
Routing security
RPKI and IRR
- RPKI
- 100% valid · 115 valid, 0 with no ROA
- ROAs
- 579 authorising AS9587
- ASPA
- no ASPA record
- IRR
- 100% registered · 115 of 115 announcements
- Route objects
- 966 naming AS9587
Reputation
Classification and threat
Mobile Cellular carrier. Addresses are shared by many handsets via CGNAT.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,775 prefixes, as published 2026-10-11. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere