112.134.219.96
# IP Intelligence Briefing: 112.134.219.96/32
## Executive Summary
IP address 112.134.219.96 is a Sri Lankan residential or DSL address assigned to Sri Lanka Telecom (SLT) with a moderate risk score of 40. The IP is firewalled with no active services detected, operates within the 112.134.216.0/22 BGP prefix, and is associated with the SLTADSL-SLT-LK network block in Colombo.
## Technical Profile
Geolocation:
- Country: Sri Lanka (LK)
- City: Colombo, Western Province
- Coordinates: 6.88°N, 79.86°E
- RIR Registry: APNIC
Network Classification:
- ASN: 9329 (SLT backbone traffic via AS6939 and AS45489)
- BGP Prefix: 112.134.216.0/22
- Route Stability: Unstable (2 route changes in 30 days)
- Infrastructure Type: Residential/DSL (SLTADSL-SLT-LK)
- Network Role: Firewalled / No Services
- DNS PTR: v4.dns.slt.lk
Security Posture:
- Risk Score: 40 (Moderate Risk)
- Abuse Confidence: Not quantified
- Blacklist Status: 0 lists
- Is Tor Exit: No
- Is Known Attacker: No
- Is Spam Source: No
- Email Auth: SPF and DMARC configured
## Observation History Analysis
Eighteen signal observations recorded. Recent activity (July 2026) indicates:
- Geolocation consistently resolves to Colombo, Sri Lanka
- ASN AS9329 (Sri Lanka Telecom Internet) confirmed
- Organization: Asela Eranda
- Abuse contact: abuse@slt.lk
- One signal flagged with threats (pulse count: 1)
- No persistent malicious behavior detected
## Neighborhood Assessment
Subnet 112.134.219.0/24 shows:
- Abuse Density: 0 (no high/medium/low risk siblings detected)
- Active Siblings: 0
- Threat Siblings: 0
- Classification: Minimal risk profile within neighborhood
## Threat Indicators
- No active threat indicators or campaigns correlated
- No honeypot hits or enumeration strikes observed
- No WAF violations recorded
- Zero total incidents logged
## Recommended Actions
Based on the moderate risk profile and firewalled status:
1. Allow: No immediate blocking recommended for inbound connections from SLT networks
2. Monitor: Track for emerging threat indicators in the 112.134.216.0/22 prefix
3. Baseline: Establish connection patterns for SLT residential traffic
4. Email: SPF and DMARC records present; no immediate email reputation concerns
## Intelligence Narrative
The IP 112.134.219.96 represents a standard SLT residential DSL connection in Colombo. While the risk score of 40 indicates moderate concern, the IP is currently firewalled with no open services. The subnet demonstrates minimal abuse activity and no correlated threat siblings. Historical data shows no persistent malicious behavior. SOC analysts should monitor for changes in the BGP route stability (currently unstable) and maintain baseline metrics for SLT residential traffic. No immediate defensive actions required, but continue standard threat intelligence monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Asela Eranda |
| ASN | AS9329 |
| Network Name | SLTADSL-SLT-LK |
| CIDR Block | 112.134.219.0/24 |
| RIR | APNIC |
| Country | LK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | v4.dns.slt.lk |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | v4.dns.slt.lk |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS9329 |
| Network Prefix | 112.134.216.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 23% | 2 | 4 |
| routing | 17% | 2 | 3 |
| services | 12% | 2 | 2 |
| ownership | 19% | 3 | 4 |
| reputation | 8% | 1 | 2 |
| geolocation | 12% | 2 | 2 |
| Overall | 15% | 12 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-15 04:05:18 UTC |
| Last Seen | 2026-09-02 06:39:41 UTC |
| Profile Built | 2026-09-02 06:50:49 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 33 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 112.134.219.96
Who owns the IP address 112.134.219.96?
112.134.219.96 is registered to Asela Eranda. The address falls within the 112.134.219.0/24 network block. Registration is held at APNIC.
Where is 112.134.219.96 located?
Geolocation data places 112.134.219.96 in Colombo, Western Province, LK. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 112.134.219.96 malicious or safe?
112.134.219.96 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 112.134.219.96?
The reverse DNS (PTR) record for 112.134.219.96 is v4.dns.slt.lk. This hostname is not forward-confirmed, so it should be treated as a weak signal.