112.134.197.61📋 Copy

# Intelligence Briefing: 112.134.197.61

## Executive Summary

IP address 112.134.197.61 presents a Low Risk threat profile with a risk score of 15/100. The address is associated with Sri Lanka Telecom's DSL network infrastructure and demonstrates stable ownership with no malicious activity indicators.

## Technical Profile

## Network Classification

• Infrastructure Type: Firewalled / No Services Detected
• Open Ports: None observed
• Service Status: No HTTP/TLS services detected
• Proxy/Tor/VPN: Negative on all checks
• Hosting Status: Negative
• Mobile Carrier: Negative

## DNS Analysis

• PTR Hostname: v4.dns.slt.lk
• Forward Resolution: Confirmed (v4.dns.slt.lk)
• Domain: slt.lk
• Email Authentication: SPF and DMARC records present
• DNSSEC: Valid

## Threat Indicators

• Blacklist Count: 0 active
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Threat Campaigns: None detected
• Abuse Confidence: Not elevated
• DNSBL Listings: 1 of 8 total lists

## Observation History

The IP has generated 19 observations, most recently on 2026-07-29. Historical analysis indicates:

• Stable Ownership: No ownership changes detected
• Threat Persistence: 0 days (not persistently malicious)
• Threat Observations: 0
• Geolocation Consistency: Consistently resolves to Kelaniya, Sri Lanka
• Network Validation: ICMP blocked during validation attempts

## Network Relationships

• Network Association: SLTADSL-SLT-LK (3 relationship records)
• DNS Associations: v4.dns.slt.lk (3 relationship records)
• Related Entities: Limited to internal SLT infrastructure

## Neighborhood Analysis

• Subnet: 112.134.197.0/24
• Neighbor Count: 0 active neighbors
• Abuse Density: 0
• Threat Siblings: 0

## Recommended Actions

No immediate firewall rules or blocking recommendations. The IP demonstrates legitimate infrastructure characteristics consistent with Sri Lanka Telecom's network operations.

## Intelligence Assessment

This IP address represents legitimate network infrastructure for Sri Lanka Telecom's DSL customer network. The low risk score, absence of threat indicators, stable ownership history, and association with established SLT DNS infrastructure indicate benign operational use. No immediate defensive action required beyond standard network monitoring.

Classification: LOW RISK / BENIGN

Priority: STANDARD

Action: Continue monitoring

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.