IOC Radar
IPMediumSignal 56/100

220.247.224.162

Location
Sri LankaSri Lanka
Meegoda, 1
ASN
AS9329
Sri Lanka Telecom Ltd
First Seen
Nov 13, 2024
Last Seen
May 11, 2026
Nov 13
First Seen
592d ago
May 11
Last Seen
49d ago
19
Reports
source reports
56%
Confidence
medium
Found in 19 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
56%
Signal Score
56 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

38 techniques

Network Information

CountryLKSri Lanka
RegionMeegoda, 1
ASNAS9329
OrganizationSri Lanka Telecom Ltd

Feed Intelligence Summary

19 reports56% confidence
19
Source reports
56%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningapacheapache attackeraptattackbad reputationbad web botblacklisted ipsblocklist_allblog spambotnetbotnet activitybrute forcebrute force attackc2command & controlcommand and controlcommunication protocolcompromised hostscredential accesscredential harvestingcredential stuffingctadata exfiltrationdata store exposuredatabase securityddosddos attackdenial of servicedistributed attackseuropeexploit kitexploitation activityexploited hostfinlandfranceftp brute forceftp brute-forcegermanyhackinghoneynet connecthttp brute forcehttp scanneridentity & access exploitationindicatorinjection activityinjection attackslateral movementlklogin attemptmalicious activitymalicious domainsmalwaremalware communicationmalware distributionnetworknetwork enumerationnetwork intrusionnetwork reconnaissancenetwork scanningnetwork securitynorth americaopenctipassword attackpassword attacksphishingphishing attackping of deathpolandpossible botnet infectionprotocol exploitationreconnaissanceremote accessremote servicesresearchedscannerscanning activitysecurity operationssecurity policysmb brute forcesmtp brute forcesocial engineeringspamsri lankassh attackt1021t1021.001t1021.002t1021.003t1021.004t1021.005t1040t1046t1059t1059.001t1059.003t1059.004t1068t1071.001t1076t1078t1105t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1486t1496t1499.001t1499.002t1499.003t1563t1566.001t1566.002t1566.003t1592t1595t1595.001t1595.002t1595.003tcp scantelnet threatthreat actorthreat intelligencethreat preventiontor nodeudp scanunauthorized access attemptunited statesweb application attackweb exploitationweb spamweb traffic

Activity Timeline

1 total obs
May 11May 11

Threat Activity Heatmap

· Peak: 2026-05-11
Less
More
Mon
Wed
Fri
Jun
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
56
SIGNAL
Signal Score
56%
Confidence
19
Reports
First seenNov 13, 2024
Last seenMay 11, 2026
GeolocationLK
CountrySri Lanka
LocationMeegoda, 1
ASNAS9329
OrgSri Lanka Telecom Ltd
Coords6.8719, 79.8939

VirusTotal

Not checked

WHOIS

raw
inetnum: 220.247.224.0 - 220.247.224.255 netname: SLTIDC-SLT-LK descr: INTERNET DATA CENTER - SRI LANKA TELECOM descr: DATA CENTER descr: COLOMBO country: LK admin-c: AE70-AP tech-c: AE70-AP abuse-c: AL1644-AP status: ASSIGNED NON-PORTABLE mnt-by: MNT-SLT-LK mnt-irt: IRT-LKTELECOM-LK last-modified: 2021-01-12T03:04:01Z source: APNIC irt: IRT-LKTELECOM-LK address: Internet Division address: 7th floor address: OTS Building address: Sri Lanka Telecom e-mail: [email protected] abuse-mailbox: [email protected] admin-c: AE70-AP tech-c: AE70-AP auth: # Filtered remarks: [email protected] was validated on 2025-10-30 mnt-by: MAINT-LK-ASE last-modified: 2025-11-17T23:08:37Z source: APNIC role: ABUSE LKTELECOMLK country: ZZ address: Internet Division address: 7th floor address: OTS Building address: Sri Lanka Telecom phone: +000000000 e-mail: [email protected] admin-c: AE70-AP tech-c: AE70-AP nic-hdl: AL1644-AP remarks: Generated from irt object IRT-LKTELECOM-LK remarks: [email protected] was validated on 2025-10-30 abuse-mailbox: [email protected] mnt-by: APNIC-ABUSE last-modified: 2025-10-30T05:58:03Z source: APNIC person: Asela Eranda nic-hdl: AE70-AP e-mail: [email protected] address: Internet Division address: 7th floor address: OTS Building address: Sri Lanka Telecom address: Lotus Road address: Colombo-1 phone: +94-11-2021913 fax-no: +94-11-2322622 country: LK remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+- remarks: Please send all IP abuse complaints to [email protected] remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+- mnt-by: MAINT-LK-ASE last-modified: 2009-09-25T07:36:05Z source: APNIC route: 220.247.224.0/24 origin: AS9329 descr: Sri Lanka Telecom Ltd Lotus Road OTS Building. 7 / F ISP Opeartions Section mnt-by: MNT-SLT-LK last-modified: 2019-10-17T07:53:44Z source: APNIC
references
https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt, https://raw.githubusercontent.com/ahamed-rizvan/IOCs/refs/heads/main/Malicous%20IP%20Address.txt

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 1 month ago
Appeared in 19 threat reports