Analysts identified the IP address 17.166.236.254/32 within the APPLE-WWNET network block managed by Apple Inc. (ASN 714). Geolocation data placed the source in Cupertino, US. Reverse DNS resolution returned the hostname 17-166-236-254.applebot.apple.com, confirming operation as a web crawler. The risk score registered at 25, classified as Low Risk. No open ports were detected on the host, and the service purpose was logged as firewalled with no active services. Threat analysis indicated the address was not a known attacker or spam source, with a blacklist count of zero. The surrounding /24 neighborhood maintained a clean classification with an abuse density of 0.0183. Behavioral analysis showed no enumeration strikes or honeypot hits. Recommendations advised monitoring due to the clean neighborhood context.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Apple Inc. |
| ASN | AS714 |
| Network Name | APPLE-WWNET |
| CIDR Block | 17.0.0.0/8 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 17-166-236-254.applebot.apple.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 17-166-236-254.applebot.apple.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 50% | 2 | 3 |
| reputation | 25% | 1 | 1 |
| geolocation | 35% | 2 | 2 |
| Overall | 34% | 10 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-25 07:01:48 UTC |
| Last Seen | 2026-09-25 07:01:48 UTC |
| Profile Built | 2026-09-25 07:16:24 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.