112.135.102.31
# IP Intelligence Briefing: 112.135.102.31/32
## Executive Summary
Target IP 112.135.102.31 is a residential infrastructure address assigned to Sri Lanka Telecom (SLT). The IP presents moderate risk (score: 40) but operates without open services and in a clean subnet environment. Current threat indicators indicate no active malicious activity.
## Ownership and Infrastructure
- ASN: 9329 (Asela Eranda)
- Organization: SLTADSL-SLT-LK
- CIDR Block: 112.135.102.0/24
- Geolocation: Colombo, Western Province, Sri Lanka (LK)
- Classification: Residential ISP address, firewalled with no services exposed
## Threat Assessment
- Risk Score: 40 (Moderate Risk)
- Blacklist Count: 0
- DNSBL Listings: 2 of 8 total lists
- Known Campaigns: None detected
- Abuse Confidence: Not flagged as known attacker or spam source
- Tor/Proxy Status: Not Tor exit, not proxy, not CDN, not hosting
## Network Behavior
- Services: No open ports detected; connection type firewalled
- DNS Resolution: v4.dns.slt.lk (SLT infrastructure)
- Email Auth: SPF and DMARC records present
- HTTP: No HTTP title, no TLS certificate, no server banner
- Network Role: Residential ISP, not cloud infrastructure
## Historical Observations (18 total signals)
Recent signal history indicates:
- No persistent malicious activity (threat persistence days: 0)
- No certificate matches or banner matches
- No correlated malicious IPs
- Subnet consistently classified as "clean" with 0 abuse density
- No ownership changes detected
## Relationship Graph
- Same Network: 5 relationships to SLTADSL-SLT-LK network
- DNS Associations: 6 relationships to v4.dns.slt.lk hostname
- All relationships point to legitimate SLT infrastructure components
## Neighborhood Analysis (112.135.102.0/24)
- Abuse Density: 0 (clean)
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 0
- Risk Distribution: No high, medium, or low risk neighbors detected
## Intelligence Narrative
The target IP 112.135.102.31 is a residential SLT infrastructure address in Colombo, Sri Lanka. Despite a moderate risk score of 40, the IP shows no active threat indicators in recent observations. The subnet 112.135.102.0/24 is classified as clean with zero abuse density and no threat-sibling IPs. The address is associated with SLT's DNS infrastructure (v4.dns.slt.lk) and has no open services or exposed ports. The IP is firewalled and not part of any known malicious campaigns.
## Recommended Actions
- Status: Monitor with low priority
- Firewall: No immediate blocking required; address is legitimate ISP infrastructure
- Threat Intel: No additional investigation needed at this time
- Geographic: Traffic from this IP should be evaluated based on legitimate SLT customer patterns
---
*Report generated: IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Asela Eranda |
| ASN | AS9329 |
| Network Name | SLTADSL-SLT-LK |
| CIDR Block | 112.135.102.0/24 |
| RIR | APNIC |
| Country | LK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | v4.dns.slt.lk |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | v4.dns.slt.lk |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS9329 |
| Network Prefix | 112.135.96.0/19 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-19 12:01:34 UTC |
| Last Seen | 2026-09-01 00:23:33 UTC |
| Profile Built | 2026-09-01 02:05:01 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 25 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 112.135.102.31
Who owns the IP address 112.135.102.31?
112.135.102.31 is registered to Asela Eranda. The address falls within the 112.135.102.0/24 network block. Registration is held at APNIC.
Where is 112.135.102.31 located?
Geolocation data places 112.135.102.31 in Colombo, Western Province, LK. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 112.135.102.31 malicious or safe?
112.135.102.31 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 112.135.102.31?
The reverse DNS (PTR) record for 112.135.102.31 is v4.dns.slt.lk. This hostname is not forward-confirmed, so it should be treated as a weak signal.