89.21.67.140
89.21.67.140 is an IPv4 address operated by HYDRA-MNT (AS25369), geolocated to San Jose, Netherlands. Its reverse DNS name is 89-21-67-140.infrawat.ch. As of October 2, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.
Intelligence Briefing: IP 89.21.67.140
The target was assigned to ASN 25369 (INFRAWATCH) within the 89.21.67.128/26 block. Reputation assessment indicated a Moderate Risk status with a score of 40. No active services or open ports were observed, and the network role was classified as firewalled. Reverse DNS resolution confirmed the hostname 89-21-67-140.infrawat.ch.
Threat analysis identified no known campaigns or specific attacker indicators. However, the address was listed on 2 of 8 available DNSBLs. Geolocation data placed the host in the Netherlands, though geographic sources conflicted regarding country code. The /24 neighborhood was classified as mostly_clean with a single threat sibling.
Operational recommendations assigned a Medium severity level suggesting rate-limiting traffic due to moderate risk status. The overall data confidence was Very Low due to insufficient intent classification.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | HYDRA-MNT |
| ASN | AS25369 |
| Network Name | INFRAWATCH |
| CIDR Block | 89.21.67.128/26 |
| RIR | RIPE |
| Country | NL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 89-21-67-140.infrawat.ch |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 89-21-67-140.infrawat.ch |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS25369 |
| Network Prefix | 89.21.67.0/24 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 25% | 8 | 9 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-02 04:32:33 UTC |
| Last Seen | 2026-10-04 04:57:53 UTC |
| Profile Built | 2026-10-02 04:46:40 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 89.21.67.140
Who owns the IP address 89.21.67.140?
89.21.67.140 is registered to HYDRA-MNT. The address falls within the 89.21.67.128/26 network block. Registration is held at RIPE.
Where is 89.21.67.140 located?
Geolocation data places 89.21.67.140 in San Jose, CA, Netherlands. The local time zone is Europe/Amsterdam. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 89.21.67.140 malicious or safe?
89.21.67.140 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 89.21.67.140?
The reverse DNS (PTR) record for 89.21.67.140 is 89-21-67-140.infrawat.ch. This hostname is forward-confirmed, meaning it resolves back to the same address.