# 103.21.167.154 — IP Intelligence Summary

103.21.167.154 is an IPv4 address operated by Hutchison Telecommunications Lanka (Private) Limited (AS132447), geolocated to Los Angeles, United States. As of October 26, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/103.21.167.154
- Last updated: 2026-10-26

## Ownership

- Organization: Hutchison Telecommunications Lanka (Private) Limited
- Network name: HUTCHISON-LK
- Allocated block: 103.21.164.0/22
- ASN: AS132447 (https://ipdebrief.com/asn/132447)
- Regional registry: APNIC

## Location

- City: Los Angeles
- Region: US-CA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

**IP Intelligence Briefing: 103.21.167.154**

**Executive Summary**

IP 103.21.167.154 was classified as High Risk with a score of 70 and a critical severity rating. The intelligence profile recommends immediate blocking of all traffic originating from this address.

**Ownership and Geolocation**

The address is owned by Hutchison Telecommunications Lanka (Private) Limited (ASN 132447) within the 103.21.164.0/22 block. Geolocation records map the endpoint to Los Angeles, US, despite the operator registration in the APNIC RIR. The network role is identified as a Residential Endpoint.

**Threat Indicators**

The IP was categorized as Campaign Infrastructure with a high likelihood of coordinated activity. Ten correlated IPs were observed, and one threat sibling was identified within the 103.21.167.0/24 subnet. The address appeared on one DNS blacklist out of eight total checks. First seen on 2026-10-04 and last seen on 2026-10-19.

**Recommendation**

Enforcement action is required to block this traffic. Suggested rules:

\- iptables: iptables -A INPUT -s 103.21.167.154 -j DROP

\- nginx: deny 103.21.167.154;

**Data Quality**

The profile confidence label was Very Low (0.2083) with 18 signal types present. The dataset is consistent

## Nearby addresses

- 103.21.167.4 (https://ipdebrief.com/103.21.167.4)

## Addresses sharing infrastructure

- 45.121.88.36 — Same abuse contact (https://ipdebrief.com/45.121.88.36)
- 45.121.88.153 — Same abuse contact (https://ipdebrief.com/45.121.88.153)
- 103.21.164.75 — Same abuse contact (https://ipdebrief.com/103.21.164.75)
- 103.21.165.43 — Same abuse contact (https://ipdebrief.com/103.21.165.43)
- 103.21.165.78 — Same abuse contact (https://ipdebrief.com/103.21.165.78)
- 103.21.166.178 — Same abuse contact (https://ipdebrief.com/103.21.166.178)
- 203.189.185.182 — Same abuse contact (https://ipdebrief.com/203.189.185.182)

---

Source: IPDebrief, "103.21.167.154 IP intelligence", https://ipdebrief.com/103.21.167.154, updated 2026-10-26. Assessments are probabilistic.