🇱🇰 Sri Lanka: live cyber threat activity

Malicious IPs, malware and ransomware victims in Sri Lanka.

33Malicious IPs listed#78 of 182 countries · 0.05% of the world

10New in the last 24hfirst seen by any feed

11Reported by 2+ feedsindependent sources agree

0Ransomware victimsposted in the last 30 days

View Sri Lanka on the live map →All listed IPs in Sri Lanka

Newly listed, last 30 days

IPs by the day a feed first listed them. Feeds that publish no dates only count from when we started tracking them.

2026-09-13 – 2026-10-12 (UTC)

What it is

Listed IPs by role.

By state or region

Western Province19
Western9
Central Province2
Eastern Province2
Northern Province1

By city

Colombo23
Dehiwala-Mount Lavinia2
Kalmunai2
Dambulla1
Keppapularu1
Sigiriya1
Kolonnawa1
Maharagama1
Ja Ela1

Networks hosting the most

Network	IPs
AS9329 Sri Lanka Telecom Ltd	15
AS18001 Dialog Axiata Plc	8
AS137409 GSL Networks Pty LTD	8
AS40676 Psychz Networks	1
AS45356 Mobitel Pvt Ltd	1

Malware families served from Sri Lanka

No malware family attributed to IPs here.

Most recently reported

IP	Role	Family / threat	Where	Network	Reported by	Last reported (UTC)
112.135.227[.]30	Attacker	Attacking host	Colombo, Western	AS9329 Sri Lanka Telecom Ltd	1 feed	2026-10-12 07:50
2402[:]4000[:]2301[:]f0a7[:]bd41[:]ea28[:]46a3[:]e20f	Attacker	Attacking host	Ja Ela, Western Province	AS18001 Dialog Axiata Plc	1 feed	2026-10-12 06:41
116.206.244[.]35	Attacker	Attacking host	Dehiwala-Mount Lavinia, Western Province	AS18001 Dialog Axiata Plc	2 feeds	2026-10-12 04:35
123.231.86[.]35	Attacker	Attacking host	Keppapularu, Northern Province	AS18001 Dialog Axiata Plc	2 feeds	2026-10-12 04:35
124.43.241[.]209	Attacker	Attacking host	Colombo, Western	AS9329 Sri Lanka Telecom Ltd	2 feeds	2026-10-12 04:35
212.104.229[.]97	Attacker	Attacking host	Maharagama, Western Province	AS45356 Mobitel Pvt Ltd	2 feeds	2026-10-12 04:35
2400[:]ff00[:]1c0[:]710c[:]68c3[:]18ff[:]fe26[:]672c	Attacker	Attacking host	Kalmunai, Eastern Province	AS18001 Dialog Axiata Plc	2 feeds	2026-10-12 04:35
2400[:]ff00[:]1c0[:]710c[:]b0b9[:]965c[:]8986[:]381c	Attacker	Attacking host	Kalmunai, Eastern Province	AS18001 Dialog Axiata Plc	2 feeds	2026-10-12 04:35
124.43.4[.]142	Attacker	Attacking host	Sigiriya, Central Province	AS9329 Sri Lanka Telecom Ltd	2 feeds	2026-10-12 01:55
185.162.89[.]7	Attacker	Attacking host	Colombo, Western Province	AS40676 Psychz Networks	1 feed	2026-10-11 18:41
112.134.181[.]250	Attacker	Malicious IP	Colombo, Western	AS9329 Sri Lanka Telecom Ltd	1 feed	2026-10-11 04:31
112.134.187[.]114	Attacker	Attacking host	Colombo, Western	AS9329 Sri Lanka Telecom Ltd	2 feeds	2026-10-11 04:31
112.135.232[.]205	Attacker	Malicious IP	Colombo, Western	AS9329 Sri Lanka Telecom Ltd	1 feed	2026-10-11 04:31
147.90.168[.]136	Attacker	Malicious IP	Colombo, Western Province	AS137409 GSL Networks Pty LTD	1 feed	2026-10-11 04:31
147.90.168[.]152	Attacker	Malicious IP	Colombo, Western Province	AS137409 GSL Networks Pty LTD	1 feed	2026-10-11 04:31
147.90.168[.]177	Attacker	Malicious IP	Colombo, Western Province	AS137409 GSL Networks Pty LTD	1 feed	2026-10-11 04:31
147.90.168[.]216	Attacker	Malicious IP	Colombo, Western Province	AS137409 GSL Networks Pty LTD	1 feed	2026-10-11 04:31
147.90.168[.]235	Attacker	Malicious IP	Colombo, Western Province	AS137409 GSL Networks Pty LTD	1 feed	2026-10-11 04:31
147.90.168[.]53	Attacker	Malicious IP	Colombo, Western Province	AS137409 GSL Networks Pty LTD	1 feed	2026-10-11 04:31
147.90.168[.]70	Attacker	Malicious IP	Colombo, Western Province	AS137409 GSL Networks Pty LTD	1 feed	2026-10-11 04:31
147.90.168[.]96	Attacker	Malicious IP	Colombo, Western Province	AS137409 GSL Networks Pty LTD	1 feed	2026-10-11 04:31
175.157.46[.]124	Attacker	Malicious IP	Colombo, Western Province	AS18001 Dialog Axiata Plc	1 feed	2026-10-11 04:31
124.43.68[.]3	Attacker	Malicious IP	Colombo, Western	AS9329 Sri Lanka Telecom Ltd	1 feed	2026-10-10 04:30
124.43.18[.]236	Attacker	Malicious IP	Colombo, Western Province	AS9329 Sri Lanka Telecom Ltd	1 feed	2026-10-09 04:27
122.255.14[.]70	Attacker	Attacking host	Dambulla, Central Province	AS18001 Dialog Axiata Plc	2 feeds	—

See every listed IP in Sri Lanka →

Ransomware victims in Sri Lanka

No ransomware victims from Sri Lanka posted in the last 90 days.