Who owns IP address 216.73.216.140?

IP address 216.73.216.140 is allocated to Amazon.com, Inc. under AS16509. The Regional Internet Registry is RIPE NCC.

Where is 216.73.216.140 located?

216.73.216.140 is geolocated to Columbus, Ohio, United States with an accuracy radius of approximately 20 km. Note that IP geolocation is approximate and identifies the ISP's infrastructure location, not the exact physical address of the user.

Is 216.73.216.140 a VPN or proxy?

No, 216.73.216.140 is not identified as a VPN, proxy, or Tor exit node based on current threat intelligence data. It appears to be a datacenter IP address.

How do I report abuse from 216.73.216.140?

Send an abuse report to abuse@idnic.net including the IP address, UTC timestamps, and log excerpts showing the malicious activity. For urgent issues. If no response within 48 hours, escalate to the Regional Internet Registry (APNIC).

IP Address Details:

🇺🇸Columbus, Ohio, United States — Amazon.com, Inc.

IPv4

Datacenter — AWS

Network Details

ISP: Amazon.com, Inc.
Organization: Amazon.com, Inc.
ASN: AS16509
Registry (RIR): RIPE NCC
Reverse DNS: None

Geolocation

Country: 🇺🇸United States (US)
Region: Ohio (OH)
City: Columbus
Postal Code: 43215
Latitude: 39.9625
Longitude: -83.0061
Accuracy Radius: ~20 km
Continent: North America (NA)

Timezone & Region

Timezone: America/New_York
Abbreviation: EST
UTC Offset: GMT-05:00
Daylight Saving: Active
Capital: Washington D.C.
Calling Code: +1
Currency: USD

Security Analysis

Threat Score15/100 — Low Risk

VPN

Clear

Routes traffic through a remote server to mask the real IP.

Proxy

Clear

Intermediary server that forwards requests on behalf of users.

Tor Exit Node

Clear

Part of the Tor anonymous communication network.

Datacenter / Cloud

Detected

Hosted on a cloud or data center provider, not a residential ISP.

Privacy Relay

Clear

Apple iCloud Private Relay or similar privacy service.

Bogon / Reserved

Clear

RFC-reserved address not intended for public internet traffic.

Detected Services

AWS

WHOIS / Network Registration

Network Block

Network Name: IANA-BLOCK
Handle: 0.0.0.0 - 255.255.255.255
IP Range: 0.0.0.0 – 255.255.255.255
CIDR: 0.0.0.0/0
RIR: APNIC
Status: active

Organization

Name: ID-NIC ADMINISTRATORS
ID: IA55-AP

Registered Aug 20, 2019

Last Updated Oct 23, 2018

Abuse Reporting & Contact Directory

If you are experiencing malicious activity from this IP address, use the contacts below to file an abuse report with the network operator. Include timestamps, log excerpts, and the IP address in your report.

ID-NIC ADMINISTRATORSIA55-AP

Abuse

DDoS attacks, hacking, port scanning, or any malicious activity originating from this IP address.

[email protected]

Technical

Routing issues, network outages, peering problems, or BGP misconfigurations.

[email protected]

+62-21-52960634

When Should You Report This IP Address?

DDoS / DoS Attack

Your server is being flooded with traffic from this IP, causing outages or degraded performance.

Evidence to include: Firewall logs, bandwidth graphs, connection counts

Brute Force / Unauthorized Access

Repeated login attempts, SSH brute forcing, or attempts to exploit vulnerabilities on your systems.

Evidence to include: Auth logs, fail2ban logs, IDS/IPS alerts

Spam & Unsolicited Email

This IP is sending bulk unsolicited email or is listed on spam blocklists.

Evidence to include: Email headers, message samples, blocklist URLs

Phishing & Scam Sites

This IP hosts websites impersonating legitimate services to steal credentials or financial data.

Evidence to include: URLs, screenshots, domain registration details

Port Scanning & Reconnaissance

Systematic scanning of your network ports or enumeration of services, often a precursor to an attack.

Evidence to include: Firewall logs, IDS alerts, netflow data

Malware & Botnet C2

This IP is distributing malware, acting as a command-and-control server, or participating in a botnet.

Evidence to include: Malware samples, network captures, DNS logs

This IP hosts or distributes copyrighted material without authorization.

Evidence to include: URLs to infringing content, proof of ownership

Child Exploitation (CSAM)

Report to law enforcement immediately. Contact NCMEC (USA) or your national hotline, then notify the ISP.

Evidence to include: Do not download or retain material — report URLs/IPs only

Tips for Filing an Effective Abuse Report

Always include the IP address, timestamps with timezone, and log excerpts showing the malicious activity.
Send reports from a professional email address — ISPs may deprioritize reports from free email providers.
For urgent threats (active attacks, CSAM), call the abuse phone number directly rather than waiting for an email response.
If you don't receive a response within 48 hours, escalate to the Regional Internet Registry (APNIC).
For child exploitation material, report to NCMEC CyberTipline (USA) or your national hotline first.

IP Geolocation Lookup