121.127.34.167
IP address 121.127.34.167 was classified as a Tor exit node with a high-risk reputation score of 70. Threat indicators confirmed Tor exit relay activity, and the endpoint advertised SSH on TCP port 22 running OpenSSH 9.6p1 on Ubuntu. Geolocation data placed the resource in Chicago, Illinois; however, RTT measurements contradicted the claimed physical distance, flagging a geolocation validation violation. The address was associated with ASN 400587 (Ryamer, LLC). Due to the high-risk classification and confirmed anonymization role, the address was recommended for immediate blocking.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ryamer, LLC |
| ASN | AS400587 |
| Network Name | RL-877 |
| CIDR Block | 121.127.34.0/24 |
| RIR | APNIC |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.19 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 5 |
| routing | 40% | 4 | 7 |
| services | 31% | 2 | 4 |
| ownership | 37% | 3 | 7 |
| reputation | 40% | 1 | 39 |
| geolocation | 30% | 2 | 4 |
| Overall | 35% | 14 | 66 |
| Data Coherence | Mixed Signals (60%) — 2 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: AF, US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-08 07:41:58 UTC |
| Last Seen | 2026-09-18 19:25:00 UTC |
| Profile Built | 2026-09-18 18:47:04 UTC |
| Data Freshness | Live |
| Signal Types | 28 |
| Total Observations | 114 |
Full dossier details are available via our API.