103.21.167.154
103.21.167.154 is an IPv4 address operated by Hutchison Telecommunications Lanka (Private) Limited (AS132447), geolocated to Los Angeles, United States. As of October 26, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.
IP Intelligence Briefing: 103.21.167.154
Executive Summary
IP 103.21.167.154 was classified as High Risk with a score of 70 and a critical severity rating. The intelligence profile recommends immediate blocking of all traffic originating from this address.
Ownership and Geolocation
The address is owned by Hutchison Telecommunications Lanka (Private) Limited (ASN 132447) within the 103.21.164.0/22 block. Geolocation records map the endpoint to Los Angeles, US, despite the operator registration in the APNIC RIR. The network role is identified as a Residential Endpoint.
Threat Indicators
The IP was categorized as Campaign Infrastructure with a high likelihood of coordinated activity. Ten correlated IPs were observed, and one threat sibling was identified within the 103.21.167.0/24 subnet. The address appeared on one DNS blacklist out of eight total checks. First seen on 2026-10-04 and last seen on 2026-10-19.
Recommendation
Enforcement action is required to block this traffic. Suggested rules:
- iptables: iptables -A INPUT -s 103.21.167.154 -j DROP
- nginx: deny 103.21.167.154;
Data Quality
The profile confidence label was Very Low (0.2083) with 18 signal types present. The dataset is consistent
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Hutchison Telecommunications Lanka (Private) Limited |
| ASN | AS132447 |
| Network Name | HUTCHISON-LK |
| CIDR Block | 103.21.164.0/22 |
| RIR | APNIC |
| Country | LK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS132447 |
| Network Prefix | 103.21.167.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 4 |
| geolocation | 35% | 2 | 3 |
| Overall | 25% | 10 | 20 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-04 08:09:52 UTC |
| Last Seen | 2026-10-26 20:09:52 UTC |
| Profile Built | 2026-10-26 20:20:42 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 29 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.21.167.154
Who owns the IP address 103.21.167.154?
103.21.167.154 is registered to Hutchison Telecommunications Lanka (Private) Limited. The address falls within the 103.21.164.0/22 network block. Registration is held at APNIC.
Where is 103.21.167.154 located?
Geolocation data places 103.21.167.154 in Los Angeles, US-CA, United States. The local time zone is America/Los_Angeles. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.21.167.154 malicious or safe?
103.21.167.154 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.