Reputation · trust score
A transparent 0–100 signal. Every entity starts at a neutral baseline of 65; threat-intel blocklists, exposure, reverse-DNS, routing and allocation each adjust it up or down. Higher is more trustworthy.
- Baseline (neutral) 65
- Multiple-origin (MOAS) routing anomaly −12
- Trust score 53 / 100
Experimental · trust-vectors model v1.2.0 — a transparent heuristic, not a definitive verdict. How it works →
⚠ 21 MOAS prefixes — multiple origin ASNs detected
All MOAS anomalies →A previously stable prefix originated by AS396986 is now also announced by another ASN (MOAS — Multiple-Origin AS), detected from our RIPE RIS collectors. Often benign (anycast, multi-homing, or a recent transfer) — but it can signal a route leak or prefix hijack, so it's worth inspecting.
| Prefix | Origin ASNs | Last detected (UTC) |
|---|---|---|
| 71.18.183.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.43.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 192.64.15.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.8.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.95.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.11.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.135.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.104.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.116.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.243.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.188.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.33.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 147.160.180.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.52.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
| 71.18.130.0/24 | AS11983, AS396986 | 2026-07-24 15:53:49 |
Showing the 15 most recently detected of 21 MOAS prefixes. Many multi-origin prefixes on large networks are benign (anycast); see all MOAS anomalies.
Network profile
Source: PeeringDB →Present at 93 internet exchanges: MegaIX Berlin, DE-CIX Frankfurt: DE-CIX Frankfurt Peering LAN, MegaIX Dusseldorf, VIX, MyIX, Equinix Ashburn, BIX.BG: Main, MegaIX Frankfurt, LINX Manchester, Equinix Singapore, …
Top CIDR ranges
BGP Announced Prefixes
Live BGP anomalies →Prefixes AS396986 actually originates in BGP, observed across our RIPE RIS collectors. This live routing view can differ from the registry allocation above.
| Prefix | Announcement samples | Last seen |
|---|---|---|
| 139.177.240.0/24 | 292,063 | 2026-07-24 15:54:01 |
| 101.45.14.0/24 | 248,005 | 2026-07-24 15:47:04 |
| 71.18.133.0/24 | 153,298 | 2026-07-24 15:51:17 |
| 71.18.132.0/24 | 152,752 | 2026-07-24 15:51:17 |
| 71.18.34.0/24 | 139,242 | 2026-07-24 15:54:31 |
| 71.18.167.0/24 | 138,753 | 2026-07-24 15:54:31 |
| 71.18.212.0/24 | 134,117 | 2026-07-24 15:54:50 |
| 71.18.211.0/24 | 134,086 | 2026-07-24 15:54:50 |
| 71.18.93.0/24 | 126,055 | 2026-07-24 15:51:17 |
| 71.18.77.0/24 | 87,376 | 2026-07-24 15:47:23 |
| 71.18.199.0/24 | 77,963 | 2026-07-24 15:48:15 |
| 71.18.177.0/24 | 71,101 | 2026-07-24 15:46:53 |
| 71.18.205.0/24 | 67,528 | 2026-07-24 15:52:39 |
| 71.18.24.0/24 | 60,951 | 2026-07-24 15:46:41 |
| 101.45.15.0/24 | 47,185 | 2026-07-24 15:47:05 |
| 71.18.81.0/24 | 43,029 | 2026-07-24 15:51:18 |
| 71.18.82.0/24 | 42,097 | 2026-07-24 15:47:03 |
| 71.18.164.0/24 | 41,599 | 2026-07-24 15:47:03 |
| 71.18.201.0/24 | 39,895 | 2026-07-24 15:53:55 |
| 71.18.200.0/24 | 39,586 | 2026-07-24 15:53:55 |
| 71.18.165.0/24 | 39,563 | 2026-07-24 15:47:05 |
| 71.18.118.0/24 | 39,080 | 2026-07-24 15:52:39 |
| 71.18.122.0/24 | 38,830 | 2026-07-24 15:52:39 |
| 199.103.25.0/24 | 37,259 | 2026-07-24 15:53:29 |
| 101.45.3.0/24 | 37,017 | 2026-07-24 15:47:19 |
| 71.18.117.0/24 | 33,363 | 2026-07-24 15:52:39 |
| 71.18.30.0/24 | 31,508 | 2026-07-24 15:52:39 |
| 71.18.7.0/24 | 31,183 | 2026-07-24 15:46:41 |
| 71.18.100.0/24 | 31,013 | 2026-07-24 15:46:57 |
| 71.18.231.0/24 | 30,134 | 2026-07-24 15:51:18 |
| 71.18.245.0/24 | 27,979 | 2026-07-24 15:51:18 |
| 71.18.204.0/24 | 27,360 | 2026-07-24 15:52:39 |
| 71.18.180.0/24 | 26,418 | 2026-07-24 15:46:57 |
| 71.18.239.0/24 | 26,354 | 2026-07-24 15:46:41 |
| 71.18.159.0/24 | 26,276 | 2026-07-24 15:46:41 |
| 71.18.202.0/24 | 26,130 | 2026-07-24 15:52:39 |
| 71.18.176.0/24 | 26,081 | 2026-07-24 15:52:39 |
| 71.18.47.0/24 | 25,227 | 2026-07-24 15:47:04 |
| 71.18.184.0/24 | 24,107 | 2026-07-24 15:47:06 |
| 71.18.46.0/24 | 23,295 | 2026-07-24 15:46:57 |
| 71.18.203.0/24 | 23,032 | 2026-07-24 15:52:39 |
| 71.18.25.0/24 | 22,730 | 2026-07-24 15:46:38 |
| 71.18.168.0/24 | 22,707 | 2026-07-24 15:46:38 |
| 71.18.187.0/24 | 21,929 | 2026-07-24 15:47:26 |
| 71.18.179.0/24 | 20,756 | 2026-07-24 15:52:39 |
| 101.45.202.0/24 | 19,578 | 2026-07-24 15:51:17 |
| 199.103.24.0/24 | 16,749 | 2026-07-24 15:53:49 |
| 71.18.170.0/24 | 16,237 | 2026-07-24 15:47:06 |
| 71.18.171.0/24 | 15,859 | 2026-07-24 15:47:06 |
| 71.18.42.0/24 | 15,675 | 2026-07-24 15:52:39 |
Showing top 50 of 237 announced prefixes by sample volume.
Frequently Asked Questions
What is AS396986?
AS396986 is an Autonomous System Number assigned to Bytedance Inc.. An ASN identifies a network that controls a specific set of IP addresses and determines how traffic is routed across the internet via BGP (Border Gateway Protocol).
How many IP addresses does AS396986 announce?
AS396986 announces 62.0K IPv4 addresses distributed across 98 routed CIDR prefixes. The network is registered in United States.
Who operates AS396986?
AS396986 is operated by Bytedance Inc.. The organization is based in United States. You can view all IP ranges and related ASNs on the organization page.
What country is AS396986 registered in?
AS396986 is registered in United States. This indicates where the network operator is headquartered, though the IP addresses it announces may serve users globally.
