112.134.154.23📋 Copy

# IP Intelligence Briefing: 112.134.154.23

## Executive Summary

The IP address 112.134.154.23 is associated with Sri Lanka Telecom (SLT) infrastructure in Panadura, Western Province, Sri Lanka. The address presents a moderate risk profile (score: 40) with no active threat indicators detected. The IP is firewalled with no open services, and the /24 subnet shows no abuse density or neighboring malicious activity.

## Network Ownership & Classification

• ASN: 9329 (SLTADSL-SLT-LK)
• Organization: Asela Eranda / Sri Lanka Telecom
• CIDR Block: 112.134.154.0/24
• RIR: APNIC
• Geolocation: Panadura, Western Province, Sri Lanka (6.72°N, 79.9°E)
• Network Role: Infrastructure / Firewalled

## Threat Assessment

• Risk Score: 40 (Moderate Risk)
• Abuse Confidence Score: Not available
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Status: Listed on 2 of 8 DNS blacklists
• Threat Feeds: No active threat indicators
• Known Campaigns: None identified

## Network Infrastructure

• Services Detected: None (firewalled/no services)
• Open Ports: 0
• DNS PTR Hostname: v4.dns.slt.lk
• Email Authentication: SPF and DMARC records configured
• DNSSEC: Valid
• Control Plane: BGP prefix 112.134.152.0/22, route changes in 30 days: 0

## Neighborhood Analysis

• Subnet: 112.134.154.23/24
• Abuse Density: 0%
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 0
• Total Siblings: 0

## Relationship Graph

• Network Associations: SLTADSL-SLT-LK (2 entries)
• DNS Associations: v4.dns.slt.lk
• Related Hostnames: v4.dns.slt.lk

## Observation History

• Total Observations: 13
• Latest Signal: 2026-07-25
• Operator Score: 0.1304 (Minimal)
• DNSSEC Validation: Confirmed
• Blacklist Status: 2 listings detected (max severity: high)
• Threat Persistence: No persistent malicious activity detected

## Recommended Actions

Based on the moderate risk profile and lack of active threat indicators:

1. Allow Traffic: No immediate blocking required for inbound/outbound traffic from this IP

2. Monitor DNSBL Listings: Two DNS blacklist entries warrant monitoring for changes

3. Geographic Filtering: Consider geographic policies if traffic from Sri Lanka requires review

4. Email Validation: SPF and DMARC records are properly configured for the slt.lk domain

5. Firewall Rules: No specific firewall rules required; traffic appears legitimate

## Conclusion

112.134.154.23 is a legitimate Sri Lankan telecommunications infrastructure IP with moderate risk scoring driven by DNS blacklist listings rather than active malicious behavior. The absence of open services, no threat indicators, and clean neighborhood profile suggest this IP does not require immediate defensive action. SOC analysts should monitor the DNS blacklist status but may allow normal traffic flows through this address.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.