71.18.135.245
Intelligence regarding IP address 71.18.135.245 indicates a Low Risk status with an assigned risk score of 25. Ownership attributes mapped to Bytedance Inc. within the 71.18.0.0/16 CIDR block under the ARIN registry. Network role assessment classified the endpoint as a Web Server exposing TCP ports 80 and 443.
Technical analysis revealed the server banner reported Byte-nginx, and TLS certificate inspection confirmed the subject CN=*.tiktokcdn.com issued by DigiCert. HTTP probes returned a 403 status code. DNS configuration lacked SPF, DMARC, or DNSSEC validation, with one listing recorded against eight DNSBL queries. Geolocation data placed the node in New York, US, but physics validation flagged a contradiction, as the observed Round Trip Time of 79.0ms was below the minimum possible 126.6ms required for the reported 6327.9km distance.
No threat indicators, blacklists, or known campaigns were associated with the address, and behavioral analysis recorded zero honeypot hits or active attacker activity. The intelligence assessment recommended monitoring the IP due to signal contradictions present in the profile, maintaining a low severity rating.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Bytedance Inc. |
| ASN | — |
| Network Name | BYTED |
| CIDR Block | 71.18.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Byte-nginx |
| HTTP Title | — |
🔐 TLS Certificate
CN=*.tiktokcdn.com was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | *.tiktokcdn.comtiktokcdn.com |
| Valid From | 2025-07-14T00:00:00+00:00 |
| Valid Until | 2026-08-14T23:59:59+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 396 days |
| Serial Number | 034CF447BAA092BA62DE21F4D778042F |
| Thumbprint | 4E3F18113E713AA6767BAA7100850FC9EFBD0613 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 33% | 2 | 5 |
| Overall | 26% | 10 | 22 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-31 04:35:06 UTC |
| Last Seen | 2026-09-26 12:48:13 UTC |
| Profile Built | 2026-09-26 12:51:32 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 34 |
Full dossier details are available via our API.