IP Intelligence Briefing: 162.125.21.3
Ownership and Infrastructure
The IP address 162.125.21.3 is owned by Dropbox, Inc. (ASN 19679) and registered under the DROPB netname with ARIN. The asset is classified as a Web Server operating within the United States.
Reputation and Threat Profile
The system assigned a Low Risk reputation to this address with a risk score of 25. Analysis revealed zero blacklist entries, no known campaign associations, and no matches against active threat feeds. The asset was not flagged as a Tor exit node, known attacker, or spam source.
Technical Observations
Network scans identified port 443 (HTTPS) as open. TLS certificate analysis confirmed the domain api-notify.dropbox.com, with Subject Alternative Names (SANs) extending to api-notify0.dropbox.com, beacon.dropbox.com, bolt.dropbox.com, and notify.dropboxapi.com. Forward resolution data showed no PTR hostnames or additional hostnames.
Recommendation
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Dropbox, Inc. |
| ASN | AS19679 |
| Network Name | DROPB |
| CIDR Block | 162.125.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/4 domains |
| DMARC | 4/4 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | envoy |
| HTTP Title | β |
π TLS Certificate
| SANs | api-notify.dropbox.comapi-notify0.dropbox.combeacon.dropbox.combolt.dropbox.comnotify.dropboxapi.comthunder.dropbox.com |
| Valid From | 2026-03-31T00:00:00+00:00 |
| Valid Until | 2026-10-15T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 198 days |
| Serial Number | 09875872714623205F4B4F9FF16C3D92 |
| Thumbprint | E377DB2ADCCBFC945C9D99E5A2D02B69872BE569 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 4 |
| Overall | 24% | 10 | 18 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-03 23:33:59 UTC |
| Last Seen | 2026-09-22 03:32:58 UTC |
| Profile Built | 2026-09-22 03:48:03 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 39 |
Full dossier details are available via our API.