# 71.18.8.229 — IP Intelligence Summary

71.18.8.229 is an IPv4 address operated by Bytedance Inc., geolocated to New York, United States. As of November 2, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/71.18.8.229
- Last updated: 2026-11-02

## Ownership

- Organization: Bytedance Inc.
- Network name: BYTED
- Allocated block: 71.18.0.0/16
- ASN: —
- Regional registry: ARIN

## Location

- City: New York
- Region: US-NY
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

An intelligence assessment of 71.18.8.229 classified the address as a web server under ownership of Bytedance Inc. within the 71.18.0.0/16 block. The system reported a High Risk reputation with a risk score of 70. Technical indicators identified HTTP and HTTPS services on ports 80 and 443, utilizing a TLS certificate for *.tiktokcdn.com and a Byte-nginx banner.

Geolocation data placed the host in New York, US, but RTT measurements contradicted this finding, showing a latency inconsistency. The network neighborhood was classified as mixed with five threat siblings. Although specific campaign matches and blacklist listings were absent, the profile labeled the host as Suspicious and issued a critical severity recommendation to block traffic. Firewall rules were generated for iptables, nginx, and pf based on the high risk score.

## Nearby addresses

- 71.18.8.33 (https://ipdebrief.com/71.18.8.33)
- 71.18.8.65 (https://ipdebrief.com/71.18.8.65)
- 71.18.8.225 (https://ipdebrief.com/71.18.8.225)
- 71.18.8.226 (https://ipdebrief.com/71.18.8.226)
- 71.18.8.227 (https://ipdebrief.com/71.18.8.227)
- 71.18.8.231 (https://ipdebrief.com/71.18.8.231)
- 71.18.8.233 (https://ipdebrief.com/71.18.8.233)
- 71.18.8.234 (https://ipdebrief.com/71.18.8.234)
- 71.18.8.236 (https://ipdebrief.com/71.18.8.236)
- 71.18.8.237 (https://ipdebrief.com/71.18.8.237)
- 71.18.8.244 (https://ipdebrief.com/71.18.8.244)

## Addresses sharing infrastructure

- 71.18.10.236 — Same TLS certificate (https://ipdebrief.com/71.18.10.236)
- 71.18.10.237 — Same TLS certificate (https://ipdebrief.com/71.18.10.237)
- 71.18.10.239 — Same TLS certificate (https://ipdebrief.com/71.18.10.239)
- 71.18.33.229 — Same TLS certificate (https://ipdebrief.com/71.18.33.229)
- 71.18.33.230 — Same TLS certificate (https://ipdebrief.com/71.18.33.230)
- 71.18.33.237 — Same TLS certificate (https://ipdebrief.com/71.18.33.237)
- 71.18.50.230 — Same TLS certificate (https://ipdebrief.com/71.18.50.230)
- 71.18.53.227 — Same TLS certificate (https://ipdebrief.com/71.18.53.227)

---

Source: IPDebrief, "71.18.8.229 IP intelligence", https://ipdebrief.com/71.18.8.229, updated 2026-11-02. Assessments are probabilistic.