71.18.145.247
Intelligence Briefing: IP 71.18.145.247/32
The IP 71.18.145.247 was observed between 2026-09-03 and 2026-09-12. Ownership records indicate the address belongs to Bytedance Inc. (ASN 396986) within the 71.18.0.0/16 CIDR block. The asset functioned as a Web Server, exposing HTTP and HTTPS services on ports 80, 443, and 8443 with a "Bytedance NSS" server banner.
Geolocation data claimed the United States, but physics measurements contradicted this finding, showing an RTT of 79.0ms against a calculated minimum of 126.6ms. The asset carried a Low Risk reputation score of 25. While no specific threat campaigns or known attacker flags were identified, the IP appeared on one DNS blacklist. No active attack behaviors, honeypot hits, or WAF violations were recorded. The profile indicates a recommendation to monitor the asset due to signal contradictions. The data was last updated on 2026-09-12.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Bytedance Inc. |
| ASN | AS396986 |
| Network Name | BYTED |
| CIDR Block | 71.18.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | 0/3 domains |
| DMARC | 0/3 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 3 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 8443 | https-alt | tcp | — |
| Closed Ports | 22, 25, 3389, 8080 (3 open / 7 scanned) | ||
| Server | Bytedance NSS |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | n7-052-059.sea3a |
| Valid From | 2025-12-04T00:54:58+00:00 |
| Valid Until | 2026-12-04T00:54:58+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 3F1F7897049DF4D7 |
| Thumbprint | CD635734EC2F9EAD53A64F13C674004755B00039 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 37% | 2 | 6 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 4 |
| Overall | 25% | 10 | 23 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-03 14:45:31 UTC |
| Last Seen | 2026-09-19 21:39:49 UTC |
| Profile Built | 2026-09-23 09:28:17 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 36 |
Full dossier details are available via our API.