17.166.237.196
Inteligence Briefing: IP 17.166.237.196/32
Asset Identity: The IP address 17.166.237.196 is owned by Apple Inc. (AS714, APPLE-WWNET) and registered in Cupertino, US. Reverse DNS resolution confirmed the hostname 17-166-237-196.applebot.apple.com.
Risk Assessment: The profile maintains a Low Risk reputation score of 25. Control plane data indicated a single DNSBL listing, though the threat section reported zero active blacklist counts. The asset is classified as Firewalled / No Services with no open ports detected.
Threat Indicators: No malicious activity was observed. Threat indicators returned null, and the address was not flagged as a known attacker, spam source, or Tor exit node. No campaigns were correlated.
Network Behavior: Behavioral analysis recorded zero incidents, honeypot hits, enumeration strikes, or WAF violations. The neighborhood subnet 17.166.237.0/24 was classified as clean with zero threat siblings.
Recommendation: Monitor the address with low severity. The current profile indicates benign infrastructure activity associated with Apple botnet traffic.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Apple Inc. |
| ASN | AS714 |
| Network Name | APPLE-WWNET |
| CIDR Block | 17.0.0.0/8 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 17-166-237-196.applebot.apple.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 17-166-237-196.applebot.apple.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-25 16:02:06 UTC |
| Last Seen | 2026-09-25 16:02:06 UTC |
| Profile Built | 2026-09-25 16:19:33 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 19 |
Full dossier details are available via our API.