Autonomous system detail

AS13414

Announced

Operated by TWITTER - Twitter Inc..

Summary

// analyst note
ARIN org name still 'Twitter Inc.' but the network is operationally X Corp. Allocation date is the autnum TOP-LEVEL registration (2010-07-09), not the org-entity 'last changed' 2026-06-24. CAIDA timed out, so as_rank/customer_cone/peers_sample are Unknown (null).
// security note
NEUTRAL/DATED: victim (not source) of two censorship-motivated BGP mis-originations of 104.244.42.0/24 — AS136168 (Myanmar, Feb 2021) and RTComm AS8342 (Russia, 28 Mar 2022).
IPv4 prefixes
25
~27.6K addresses
IPv6 prefixes
3
announced
Peer networks
15
6 up · 2 down
IANA block
13312-15359
Assigned by ARIN
[ 01 ] — Context

About this ASN.

Updated  ·  Confidence: High

AS13414 is the global content autonomous system number registered under ARIN to Twitter Inc., the operator of the social platform now branded X. The ARIN org record (handle TWITT) still carries the legal name "Twitter Inc." at 1355 Market Street, San Francisco, but operationally the network belongs to X Corp.: Twitter Inc. merged into X Corp. in April 2023, and X Corp. became a wholly owned subsidiary of xAI on 2025-03-28. PeeringDB classifies the network as Content with a Heavy-Outbound traffic ratio and a Selective peering policy (100 Mbit/s minimum, interconnection at the nearest POP to the home market, no ratio or contract requirement). Routing is healthy and globally visible: RIPEstat shows 39 active IPv4 prefixes (~41,984 addresses) and 3 IPv6 prefixes, with 326/326 RIS peers seeing the IPv4 routes and near-full IPv6 visibility, spanning ARIN (US), RIPE (EU/Amsterdam) and APNIC (APAC/Japan-Singapore) blocks via anycast. The security record shows AS13414 as a victim, not a source: it was the target of two censorship-motivated BGP prefix mis-originations of 104.244.42.0/24 — by AS136168 (Myanmar) in February 2021 and by RTComm AS8342 (Russia) in March 2022 — after which the operator deployed RPKI ROAs that demonstrably limited the second event's spread. No notable abuse signal was found across Spamhaus, AbuseIPDB (0% confidence on sampled IPs), CleanTalk (low, noisy outbound-mail rates), or NANOG archives as of June 2026.

Operator
Twitter Inc. (ARIN org handle TWITT); operationally X Corp. since the April 2023 merger, a wholly owned subsidiary of xAI since 2025-03-28 [Confirmed] — ARIN RDAP autnum/13414, en.wikipedia.org/wiki/X_Corp.
Country / RIR
US, ARIN [Confirmed] — ARIN RDAP autnum/13414
Allocated
2010-07-09 (ARIN RDAP autnum TOP-LEVEL registration event; RIR registry date, NOT an IEEE date — IEEE publishes no ASN registration dates); last changed 2015-02-19 [Confirmed by two angles A2+A3] — rdap.arin.net/registry/autnum/13414
Org status
active. X Corp. is a privately held Nevada corporation (incorporated 2023-03-09); Twitter Inc. (Delaware) merged into it in April 2023; wholly owned by xAI since 2025-03-28. ARIN status: ok [Confirmed] — ARIN RDAP, en.wikipedia.org/wiki/X_Corp.
Contacts
abuse net-abuse@twitter.com (TNA33-ARIN, "Twitter Network Abuse"); NOC noc@twitter.com (NETWO3685-ARIN); technical William Fenech (FENEC5-ARIN; individual mailbox in the ARIN RDAP record); +1-415-222-9670; 1355 Market Street, Suite 900, San Francisco, CA 94103, US [Confirmed] — ARIN RDAP entities

Security/abuse context (NEUTRAL, DATED)

victim (not source) of two BGP prefix mis-originations of 104.244.42.0/24 — AS136168 (Myanmar, Feb 2021) and RTComm AS8342 (Russia, 28 Mar 2022), both censorship-motivated. No notable abuse signal as of 2026-06: AbuseIPDB 0% confidence on sampled IPs, CleanTalk low/noisy rates, no Spamhaus ASN listing; a 2010 Spamhaus SBL listing (SBL84807) was transient and email-invitation-related, not IP-infrastructure

[Confirmed] — manrs.org, isc.sans.edu/diary/28488, abuseipdb.com, spamresource.com

Network & routing

Our research recorded 39 IPv4 prefixes; RIPEstat currently announces 25.
Network type
Content — global anycast content network, Heavy-Outbound traffic ratio, IPv4 + IPv6 unicast [Confirmed] — peeringdb.com/asn/13414
Size
39 active IPv4 prefixes (~41,984 addresses) and 3 IPv6 prefixes; 32 observed BGP neighbours [Confirmed] — RIPEstat routing-status (2026-06-25). bgp.he.net reports 41 IPv4 / 4 IPv6 originated prefixes and ~42,240 IPs (third-party count) [Likely] — bgp.he.net/AS13414
Routing/peering
announced and fully visible — 326/326 RIS peers see the IPv4 routes, 322/323 see IPv6; first seen in routing 2000-08-18 (prefix 216.174.0.0/21). Selective peering policy: 100 Mbit/s minimum, interconnect at nearest POP, multiple locations preferred, no ratio, no contract
[Confirmed] — RIPEstat routing-status, peeringdb.com/asn/13414
RPKI
ROAs deployed following the 2021 Myanmar hijack attempt; they limited the March 2022 RTComm mis-origination. Per-prefix validation not run in this pass (CAIDA timed out; no single prefix supplied) — posture is Likely partial-to-good
[Likely] — manrs.org/2022/03/lesson-learned-twitter-shored-up-its-routing-security
Upstreams / transit
SpaceX (AS14593), Arelion (AS1299), NTT America (AS2914), Hurricane Electric (AS6939) per bgp.he.net [Likely — single-source, CAIDA upstream split was Unknown] — bgp.he.net/AS13414
IX presence
18+ IXPs including AMS-IX, DE-CIX Frankfurt, DE-CIX ASEAN, BBIX Osaka, and multiple Equinix locations (10G–100G) [Likely — third-party] — bgp.he.net/AS13414, peeringdb.com/asn/13414
Notable usage
operates the X (formerly Twitter) platform, with Grok AI integration via xAI; previously ran Periscope and MoPub (both defunct). Anycast used for global delivery [Confirmed] — peeringdb.com/asn/13414, en.wikipedia.org/wiki/X_Corp.
Analyst note
ARIN org name lags the corporate reality (still "Twitter Inc."). The autnum TOP-LEVEL registration (2010-07-09) is the allocation date — not the org-entity TWITT "last changed" 2026-06-24, which is a record update. Clean, well-routed content ASN with a proactive routing-security posture.
[ 02 ] — Announced prefixes

What this network routes.

28 prefixes total · RIPEstat data · cached, not real-time
// IPv4 prefixes25
  1. 64.63.0.0/18/18
  2. 188.64.224.0/21/21
  3. 199.59.148.0/22/22
  4. 192.133.76.0/22/22
  5. 199.16.156.0/22/22
  6. 103.252.112.0/23/23
  7. 199.96.56.0/23/23
  8. 103.252.114.0/23/23
  9. 199.16.156.0/23/23
  10. 202.160.128.0/24/24
  11. 104.244.45.0/24/24
  12. 64.63.31.0/24/24
  13. 104.244.44.0/24/24
  14. 104.244.42.0/24/24
  15. 104.244.41.0/24/24
  16. 202.160.129.0/24/24
  17. 64.63.63.0/24/24
  18. 104.244.46.0/24/24
  19. 64.63.30.0/24/24
  20. 64.63.62.0/24/24
  21. 104.244.47.0/24/24
  22. 202.160.130.0/24/24
  23. 202.160.131.0/24/24
  24. 64.63.47.0/24/24
  25. 64.63.46.0/24/24
// IPv6 prefixes3
  1. 2606:1f80:f000::/36/36
  2. 2400:6680:f000::/36/36
  3. 2a04:9d40:f000::/36/36
[ 03 ] — Notable peers & upstreams

Who it talks to.

15 observed neighbours
// Notable connectionsTop 15 of 15
ASNOperatorRole
AS14593 SPACEX-STARLINK - Space Exploration Technologies Corporation upstream
AS2497 IIJ - Internet Initiative Japan Inc. upstream
AS6057 AS6057 - Administracion Nacional de Telecomunicaciones upstream
AS8220 COLT COLT Technology Services Group Limited upstream
AS60171 AFRIX-AS AFR-IX TELECOM S.A. upstream
AS63179 TWITTER - Twitter Inc. upstream
AS35995 TWITTER - Twitter Inc. downstream
AS63194 CRASH - Crashlytics, Inc downstream
AS1828 UNITAS - Unitas Global peer
AS19151 BBO-1 - BroadbandONE, LLC peer
AS199524 GCORE G-Core Labs S.A. peer
AS36236 NETACTUATE - NetActuate, Inc peer
AS24482 SGGS-AS-AP - SG.GS peer
AS35280 F5 F5 Networks SARL peer
AS49544 i3Dnet i3D.net B.V peer
Neighbours observed via public BGP collectors; not a complete peering list.