# 3.214.86.241 — IP Intelligence Summary

3.214.86.241 is an IPv4 address operated by Amazon Data Services Northern Virginia (AS14618), geolocated to Ashburn, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name ec2-3-214-86-241.compute-1.amazonaws.com. As of November 2, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/3.214.86.241
- Last updated: 2026-11-02

## Ownership

- Organization: Amazon Data Services Northern Virginia
- Network name: AMAZON-IAD
- Allocated block: 3.208.0.0/12
- ASN: AS14618 (https://ipdebrief.com/asn/14618)
- Regional registry: ARIN
- Cloud / hosting provider: Amazon Web Services

## Location

- City: Ashburn
- Region: VA
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ec2-3-214-86-241.compute-1.amazonaws.com
- Forward-confirmed: yes

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

The IP address 3.214.86.241 was identified as an Amazon Web Services EC2 instance located in Ashburn, Virginia (AS14618). The infrastructure was classified as Moderate Risk with a score of 40. Network scans revealed open ports 80 and 443 serving an nginx web server. TLS inspection indicated a certificate for rules.emergingthreats.net issued by Sectigo Limited. Behavioral analysis showed no active attacker status, zero honeypot hits, and zero enumeration strikes. However, the neighborhood classification noted one threat sibling and a medium-likelihood campaign association with nine correlated IPs. DNS hygiene scores were Good, with SPF and DMARC records present. The overall data confidence was rated Very Low. Defensive recommendations suggested implementing rate-limiting controls due to moderate risk classification. Despite the lack of immediate threat indicators, the asset required monitoring given the campaign likelihood.

## Addresses sharing infrastructure

- 3.234.195.190 — Same TLS certificate (https://ipdebrief.com/3.234.195.190)
- 13.219.33.148 — Same TLS certificate (https://ipdebrief.com/13.219.33.148)
- 32.192.0.112 — Same TLS certificate (https://ipdebrief.com/32.192.0.112)
- 34.196.191.25 — Same TLS certificate (https://ipdebrief.com/34.196.191.25)
- 34.224.148.152 — Same TLS certificate (https://ipdebrief.com/34.224.148.152)
- 34.236.96.127 — Same TLS certificate (https://ipdebrief.com/34.236.96.127)
- 35.170.172.38 — Same TLS certificate (https://ipdebrief.com/35.170.172.38)
- 52.200.51.20 — Same TLS certificate (https://ipdebrief.com/52.200.51.20)
- 52.203.247.148 — Same TLS certificate (https://ipdebrief.com/52.203.247.148)
- 52.207.204.144 — Same TLS certificate (https://ipdebrief.com/52.207.204.144)
- 100.30.62.94 — Same TLS certificate (https://ipdebrief.com/100.30.62.94)
- 100.59.242.75 — Same TLS certificate (https://ipdebrief.com/100.59.242.75)

---

Source: IPDebrief, "3.214.86.241 IP intelligence", https://ipdebrief.com/3.214.86.241, updated 2026-11-02. Assessments are probabilistic.