153.67.127.21
Analysis identified 153.67.127.21/32 as a Low Risk endpoint with a risk score of zero. Ownership records assigned the address to SpaceX Services, Inc. (ASN 14593) under the SS-2296 netname within the APNIC RIR block 153.66.0.0/15. Geolocation data located the endpoint in San José, Costa Rica, although geo sources disagreed on country-level consensus.
Threat indicators remained absent, with zero blacklist hits and no association with known campaigns or active attacker behaviors. Behavioral analysis showed zero honeypot strikes and no enumeration activity. Reverse DNS resolution mapped the address to a Starlink customer hostname (customer.gtmygtm1.isp.starlink.com), while network scans returned no open ports indicating the host was firewalled with no services exposed.
Control plane data indicated route stability as false with an operator score of 0.087. Overall confidence was rated Very Low (0.1667) due to signal contradictions and data insufficiency. Analysts were recommended to monitor the address given current signal inconsistencies, noting a severity of low.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | SpaceX Services, Inc. |
| ASN | AS14593 |
| Network Name | SS-2296 |
| CIDR Block | 153.66.0.0/15 |
| RIR | APNIC |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | customer.gtmygtm1.isp.starlink.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | customer.gtmygtm1.isp.starlink.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-11 00:06:28 UTC |
| Last Seen | 2026-09-11 00:06:28 UTC |
| Profile Built | 2026-09-11 00:17:05 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 20 |
Full dossier details are available via our API.