Sri Lanka (LK) Threat Intelligence

LK

Sri Lanka has 4,179 malicious IP addresses with 82,225 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, intrusion attempt. Top attacking networks: Sri Lanka Telecom Internet (1,871 IPs), Dialog Axiata PLC. (1,423 IPs), Space Exploration Technologies Corporation (162 IPs). Data collected since 2025-09-22, last activity 2026-10-12.

Threat Assessment: Sri Lanka exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Sri Lanka Telecom Internet and Dialog Axiata PLC..

Total Reports
82,225
Unique IPs
4,179
First Seen
2025-09-22
Last Activity
2026-10-12

Top Threat Categories

Tcp Scan 12,893
Suspicious Activity 5,035
High Threat 3,555
Malware Distribution 2,014
Intrusion Attempt 1,893

Top Attacking Networks

AS9329 Sri Lanka Telecom Internet
1,871 IPs
AS18001 Dialog Axiata PLC.
1,423 IPs
AS14593 Space Exploration Technologies Corporation
162 IPs

Most Reported IPs in Sri Lanka

220.247.224.226 1,660 reports
124.43.5.103 907 reports
124.43.4.17 880 reports
43.224.125.54 878 reports
220.247.235.22 875 reports

Access this data via API

Get Sri Lanka threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/LK

View full API documentation

See how we classify and verify threats →

Check any IP from Sri Lanka

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS9329 Intelligence AS18001 Intelligence AS14593 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...