Sri Lankan officials said on Tuesday the bombings on Eastern that killed 321 people were retaliation for attacks on mosques in New Zealand. The officials made the announcent as ISIS claimed responsibility for the coordinated blasts.
ISIS' claim, issued on its AMAQ news agency, came shortly after Sri Lanka said two domestic Islamist groups, with suspected links to foreign militants, were believed to have been behind the attacks at three churches and four hotels, which wounded about 500 people.
ISIS gave no evidence for its claim. The government has said at least seven suicide bombers were involved.
"The initial investigation has revealed that this was in retaliation for the New Zealand mosque attack," junior minister for defense Ruwan Wijewardene told parliament.
He did not elaborate on why authorities believed there was a link to the killing of 50 people at two mosques in the New Zealand city of Christchurch during Friday prayers on March 15. A lone gunman carried out those attacks.
Wijewardene said two Sri Lankan Islamist groups — the National Thawheed Jama'ut and Jammiyathul Millathu Ibrahim — were responsible for the blasts early on Sunday during Easter services and as high-end hotels served breakfast.
US intelligence sources said earlier the attacks carried some of the hallmarks of ISIS, even though it had not made an immediate claim of responsibility, as it usually does.
Prime Minister Ranil Wickremesinghe told parliament investigators were looking into foreign links.
Earlier on Tuesday, Sri Lankan government and military sources said a Syrian had been detained among 40 people being questioned over the bombs.
"He was arrested after the interrogation of local suspects," one of the sources said, referring to the unidentified Syrian.
Tuesday was declared a national day of mourning and the funerals of some of the victims were held, as pressure mounted on the government over why effective action had not been taken in response to a warning this month about a possible attack on churches by the little-known National Thawheed Jama'ut group.
The first six attacks — on three churches and three luxury hotels — came within 20 minutes on Sunday morning.
Two more explosions — at a downmarket hotel and a house in a suburb of the capital, Colombo — came in the early afternoon.
Most of the dead and wounded were Sri Lankans, although government officials said 38 foreigners were killed. That included British, US, Australian, Turkish, Indian, Chinese, Danish, Dutch and Portuguese nationals.
The UN Children's Fund said 45 children were among the dead.
Footage on CNN showed what it said was one of the bombers wearing a heavy backpack. The man patted a child on the head before entering the Gothic-style St. Sebastian church in Katuwapitiya, north of Colombo. Dozens were killed there.
The bombs brought a shattering end to a relative calm that had existed in the Buddhist-majority Indian Ocean island since a bitter civil war against mostly Hindu, ethnic Tamil separatists ended 10 years ago, and raised fears of a return to sectarian violence.
Sri Lanka's 22 million people include minority Christians, Muslims and Hindus. Until now, Christians had largely managed to avoid the worst of the island's conflict and communal tensions.
The government imposed emergency rule at midnight on Monday, giving police extensive powers to detain and interrogate suspects without court orders.
An overnight curfew has also been imposed since Sunday.
US President Donald Trump called Prime Minister Wickremesinghe on Monday to pledge US support in bringing the perpetrators to justice.
The Washington Post quoted an unidentified law enforcement official as saying FBI agents were being sent to Sri Lanka to help with the investigation.
The FBI had offered expertise to test evidence and analysts were scouring databases for information, the Post said. Counter-terrorism officials from Britain were also due on Tuesday, a Western diplomat in Colombo said.
Listen: Sri Lanka in shock
The attacks have also underlined concern over fractures in Sri Lanka's government, and whether the discord prevented action that might have stopped them.
The government received a tip-off from India this month about a possible attack on churches by the National Thawheed Jama'ut.
It was not immediately clear what action, if any, was taken in response. A government minister said on Monday that Wickremesinghe had not been informed about the warning and had been shut out of top security meetings because of a feud with President Maithripala Sirisena.
Sirisena fired Wickremesinghe last year only to be forced to reinstate him under pressure from the Supreme Court. Their relationship is reported to be fraught.
The US State Department said in a travel advisory "terrorist groups" were possibly plotting more attacks in Sri Lanka.
China's embassy warned its nationals against traveling to Sri Lanka in the near term because of "huge security risks."
China is a major investor in Sri Lanka. The embassy said one Chinese national was killed, five wounded and five were missing.
By Sanjeev Miglani and Shihar Aneez/Reuters
Reporting by Sanjeev Miglani; Additional reporting by Ranga Sirilal, Joe Brock, Mark Hosenball and Kieran Murray in Washington, and Stella Qiu and Ryan Woo in Beijing; Writing by Robert Birsel; Editing by Michael Perry, Paul Tait and Alex Richardson.