71.18.43.129
Intelligence Briefing: 71.18.43.129/32
Overview
The IP address 71.18.43.129 was observed with a low-risk reputation and a risk score of 25. Profile data indicates activity spanning from 2026-09-07 through 2026-09-25. Overall assessment confidence is low (0.325).
Ownership and Geolocation
Registration records attribute ownership to Bytedance Inc. under the BYTED network block (71.18.0.0/16) within the ARIN RIR. Geolocation consensus places the address in New York, Virginia, United States.
Network Behavior and Services
Passive and active reconnaissance identified no open ports, TLS certificates, or HTTP service banners. DNS resolution confirmed no PTR records, hosted domains, or email authentication records (SPF/DMARC). The host was not identified as a Tor exit node, known attacker, or spam source, with zero blacklist hits recorded.
Threat Assessment and Neighborhood
While the threat actor classification labeled the host as suspicious without specific campaign correlation, the 71.18.43.0/24 subnet was classified as clean with an abuse density of 0.0476. No honeypot hits or enumeration strikes were recorded.
Recommendation
Monitoring is recommended due to the clean neighborhood context. No specific firewall rules were generated.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Bytedance Inc. |
| ASN | — |
| Network Name | BYTED |
| CIDR Block | 71.18.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 4 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-07 05:59:17 UTC |
| Last Seen | 2026-09-25 22:01:08 UTC |
| Profile Built | 2026-09-25 22:12:38 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 32 |
Full dossier details are available via our API.