17.166.20.40
The IP address 17.166.20.40/32 was identified as Low Risk infrastructure (Risk Score: 25) owned by Apple Inc. (ASN 714). The address resolved to the reverse DNS hostname 17-166-20-40.applebot.apple.com within the APPLE-WWNET organization block 17.0.0.0/8. Geolocation data placed the endpoint in Cupertino, United States, with geographic consensus. Network scans returned no open ports and classified the service purpose as "Firewalled / No Services." While the threat actor classification listed the host as "Suspicious" with a tag of "suspicious," the threat feed contained zero blacklists, known campaigns, or active attacker classifications. The surrounding subnet 17.166.20.0/24 maintained a clean classification with zero threat siblings. The analysis recommendation was to Monitor the address with low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Apple Inc. |
| ASN | AS714 |
| Network Name | APPLE-WWNET |
| CIDR Block | 17.0.0.0/8 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 17-166-20-40.applebot.apple.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 17-166-20-40.applebot.apple.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 1 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-24 00:39:36 UTC |
| Last Seen | 2026-09-24 00:39:36 UTC |
| Profile Built | 2026-09-24 00:54:37 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.