# 3.148.70.206 — IP Intelligence Summary

3.148.70.206 is an IPv4 address operated by Amazon Technologies Inc. (AS16509), geolocated to Columbus, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name ec2-3-148-70-206.us-east-2.compute.amazonaws.com. As of November 1, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/3.148.70.206
- Last updated: 2026-11-01

## Ownership

- Organization: Amazon Technologies Inc.
- Network name: AT-88-Z
- Allocated block: 3.128.0.0/9
- ASN: AS16509 (https://ipdebrief.com/asn/16509)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Columbus
- Region: OH
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ec2-3-148-70-206.us-east-2.compute.amazonaws.com
- Forward-confirmed: yes

## Exposed services

- 443/tcp — https

## Analyst narrative

IP address 3.148.70.206 was identified as a High Risk infrastructure asset associated with Amazon Technologies Inc. (ASN 16509). The address was observed within an AWS cloud environment in Columbus, Ohio, resolving to the hostname ec2-3-148-70-206.us-east-2.compute.amazonaws.com.

Threat intelligence classified the IP as Campaign Infrastructure with a risk score of 70. The address was correlated with 65 associated IP addresses and served TLS certificates for the domain aibixby.com. An active HTTPS service was detected on port 443 utilizing the istio-envoy server banner.

Security operations recommended blocking traffic due to critical severity associated with the campaign infrastructure classification. Observations spanned from October 22 to October 29, 2026.

## Addresses sharing infrastructure

- 3.16.61.118 — Same TLS certificate (https://ipdebrief.com/3.16.61.118)
- 3.17.248.190 — Same TLS certificate (https://ipdebrief.com/3.17.248.190)
- 3.20.14.21 — Same TLS certificate (https://ipdebrief.com/3.20.14.21)
- 3.22.62.146 — Same TLS certificate (https://ipdebrief.com/3.22.62.146)
- 3.23.91.160 — Same TLS certificate (https://ipdebrief.com/3.23.91.160)
- 3.23.175.49 — Same TLS certificate (https://ipdebrief.com/3.23.175.49)
- 3.128.116.235 — Same TLS certificate (https://ipdebrief.com/3.128.116.235)
- 3.128.158.41 — Same TLS certificate (https://ipdebrief.com/3.128.158.41)
- 3.130.168.19 — Same TLS certificate (https://ipdebrief.com/3.130.168.19)
- 3.132.74.212 — Same TLS certificate (https://ipdebrief.com/3.132.74.212)
- 3.133.167.145 — Same TLS certificate (https://ipdebrief.com/3.133.167.145)
- 3.133.175.49 — Same TLS certificate (https://ipdebrief.com/3.133.175.49)

---

Source: IPDebrief, "3.148.70.206 IP intelligence", https://ipdebrief.com/3.148.70.206, updated 2026-11-01. Assessments are probabilistic.