Network · AS396986

AS396986 Bytedance Inc.

AS396986 (Bytedance Inc.) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Network check ASN

AS396986

  • OwnerBytedance Inc.
  • KindInternet service provider
  • Servers, not peopleno
  • IPv4 addresses56,832
  • IPv4 ranges107
  • IPv6 ranges61
Risk score0

Nothing suspicious found.

Largest IPv4 ranges

  • 71.18.96.0/21
  • 71.18.152.0/21
  • 71.18.136.0/21
  • 139.177.240.0/21
  • 71.18.88.0/22
  • 71.18.84.0/22
  • 71.18.72.0/22
  • 71.18.64.0/22
  • 71.18.56.0/22
  • 71.18.44.0/22
  • 71.18.216.0/22
  • 71.18.212.0/22

Ranges and owner from DB-IP (CC BY 4.0), updated 2026-10-21.

Check an IP address →

Detect it in code

Spot AS396986 traffic at signup.

Send the visitor's IP. The response includes the ASN, the owner and flags.hosting.

curl https://veqen-app.com/v1/ip/check \
  -H "Authorization: Bearer $VEQEN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"ip": "203.0.113.7"}'
import os, requests

r = requests.post(
    "https://veqen-app.com/v1/ip/check",
    headers={"Authorization": f"Bearer {os.environ['VEQEN_API_KEY']}"},
    json={"ip": "203.0.113.7"},
    timeout=10,
)
result = r.json()
print(result["risk"]["verdict"], result["risk"]["reasons"])
const res = await fetch("https://veqen-app.com/v1/ip/check", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.VEQEN_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({"ip": "203.0.113.7"}),
});
const result = await res.json();
console.log(result.risk.verdict, result.risk.reasons);
Questions

About AS396986

Is AS396986 a datacenter or VPN network?

AS396986 (Bytedance Inc.) looks like an internet service provider, so its addresses are mostly real home, business or mobile connections.

Who owns AS396986?

AS396986 is registered to Bytedance Inc.. It announces about 56,832 IPv4 addresses.

How do I detect traffic from AS396986?

Call the Veqen IP check with the visitor's address. The response includes the ASN, the owner and whether the network is a datacenter, VPN network, relay or ISP.