# 71.18.188.105 — IP Intelligence Summary

71.18.188.105 is an IPv4 address operated by Bytedance Inc., geolocated to New York, United States. As of October 18, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/71.18.188.105
- Last updated: 2026-10-18

## Ownership

- Organization: Bytedance Inc.
- Network name: BYTED
- Allocated block: 71.18.0.0/16
- ASN: —
- Regional registry: ARIN

## Location

- City: New York
- Region: US-NY
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

Analysis identified IP 71.18.188.105/32 as High Risk with a risk score of 70. The address was owned by Bytedance Inc. within the 71.18.0.0/16 CIDR block. Operational logs showed the IP operated web services on ports 80 and 443, presenting a TLS certificate for *.videoarchserverqa.xyz issued by DigiCert. Server banners indicated Bytedance NSS software.

Threat intelligence categorized the address as Campaign Infrastructure with a high likelihood rating, correlating with 14 other IPs sharing the same certificate subject. Geolocation data presented contradictions; the profile listed New York, US, yet round-trip time measurements of 21ms were inconsistent with the reported 6,328 km distance. DNS hygiene was absent, lacking SPF, DMARC, or DNSSEC records. Despite a zero blacklist count, the assessment recommended blocking the address due to critical severity and campaign correlation. Firewall rules were generated for iptables, nginx, and pf to drop traffic immediately.

## Nearby addresses

- 71.18.188.2 (https://ipdebrief.com/71.18.188.2)
- 71.18.188.13 (https://ipdebrief.com/71.18.188.13)
- 71.18.188.15 (https://ipdebrief.com/71.18.188.15)
- 71.18.188.112 (https://ipdebrief.com/71.18.188.112)

## Addresses sharing infrastructure

- 71.18.8.226 — Same TLS certificate (https://ipdebrief.com/71.18.8.226)
- 71.18.8.236 — Same TLS certificate (https://ipdebrief.com/71.18.8.236)
- 71.18.10.226 — Same TLS certificate (https://ipdebrief.com/71.18.10.226)
- 71.18.43.226 — Same TLS certificate (https://ipdebrief.com/71.18.43.226)
- 71.18.43.228 — Same TLS certificate (https://ipdebrief.com/71.18.43.228)
- 71.18.43.242 — Same TLS certificate (https://ipdebrief.com/71.18.43.242)
- 71.18.50.229 — Same TLS certificate (https://ipdebrief.com/71.18.50.229)
- 71.18.53.165 — Same TLS certificate (https://ipdebrief.com/71.18.53.165)
- 71.18.104.224 — Same TLS certificate (https://ipdebrief.com/71.18.104.224)
- 71.18.104.242 — Same TLS certificate (https://ipdebrief.com/71.18.104.242)
- 71.18.116.251 — Same TLS certificate (https://ipdebrief.com/71.18.116.251)
- 71.18.123.253 — Same TLS certificate (https://ipdebrief.com/71.18.123.253)

---

Source: IPDebrief, "71.18.188.105 IP intelligence", https://ipdebrief.com/71.18.188.105, updated 2026-10-18. Assessments are probabilistic.