Malicious IPs in Sri Lanka

IPv4 networks located in Sri Lanka that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
20
#74 of 176 countries
Per million allocated IPv4
35.5
#8 of 75 countries
Flagged IPv4 addresses
27
ranges count at most as a /24
Allocated IPv4 addresses
563,456
RIR delegation statistics

Sri Lanka at a glance

Sri Lanka had 20 flagged IPv4 networks in the snapshot of 2026-10-12, rank #74 of 176 countries by absolute count. Relative to its allocated IPv4 space that is 35.5 flagged networks per million addresses, rank #8 of 75, 3.9 times the median of 9.15 across all rated countries. The largest category is brute force sources with 50% of the flagged networks, followed by botnet hosts (30%). The three networks (ASNs) with the most flagged IPs hold 85% of them, led by SLTINT-AS-AP - Sri Lanka Telecom Internet (AS9329). Another 2 flagged IPv6 networks are located in Sri Lanka.

Malicious activity in Sri Lanka by category

A network listed in several categories counts once, in the most specific one. Also flagged: 2 IPv6 networks.

  • Brute force sources in Sri Lanka

    10 (50%)

    10 flagged networks, #71 of 157 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Botnet hosts in Sri Lanka

    6 (30%)

    6 flagged networks, #47 of 120 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • Other malicious networks in Sri Lanka

    4 (20%)

    4 flagged networks, #82 of 143 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

Networks with the most flagged IPs in Sri Lanka

Autonomous systems announcing the flagged networks located in Sri Lanka.

#NetworkFlagged networks
1AS9329SLTINT-AS-AP - Sri Lanka Telecom Internet10
2AS18001DIALOG-AS - Dialog Axiata PLC.6
3AS137409GSLNETWORKS-AS-AP - GSL Networks Pty LTD1
4AS40676AS40676 - Psychz Networks1
5AS45356MOBITEL-LK - Mobitel Pvt Ltd1
6AS132124ICTA-LK - Information and Communication Technology Agency of Sri Lanka1

Compare Sri Lanka with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Questions about Sri Lanka

How many malicious IP addresses are there in Sri Lanka?
On 2026-10-12, 20 IPv4 networks (/24 blocks) located in Sri Lanka were flagged for malicious activity, with 27 listed IPv4 addresses and 2 IPv6 networks. Each /24 counts once, however many of its addresses are listed.
Which networks in Sri Lanka host the most flagged IPs?
SLTINT-AS-AP - Sri Lanka Telecom Internet (AS9329, 10 networks), DIALOG-AS - Dialog Axiata PLC. (AS18001, 6 networks), GSLNETWORKS-AS-AP - GSL Networks Pty LTD (AS137409, 1 network). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Sri Lanka or anywhere else with one API call.