140.228.21.117

Classification: Malicious

140.228.21.117 is a malicious IP address. Reported by 7 threat sources, last seen 2026-09-11. Network: AS174 Rockion LLC.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
VPN IPWhois.io 2026-09-11 10:41:01 2026-09-11 10:41:01 anonymization vpn
HTTP Spammer StopForumSpam.com 2024-01-02 06:27:56 2026-09-09 07:30:32 attacker malicious-activity
Parasite SEO Blocklist.net.ua 2026-08-24 16:04:11 2026-08-24 16:04:11 attacker malicious-activity
Bruteforce Blocklist.net.ua 2026-03-28 12:45:16 2026-04-22 12:48:37 malicious-activity
Suspicious Host AbuseIPDB 2025-05-03 18:37:10 2026-04-19 11:11:21 anomalous-activity
Mail Spammer Blocklist.de 2026-04-16 08:00:16 2026-04-17 08:00:19 malicious-activity
IMAP Attacker Blocklist.de 2026-04-16 07:00:12 2026-04-17 07:00:14 malicious-activity
Proxy FireHOL 2024-01-15 03:48:59 2024-01-15 03:48:59 anonymization
Malicious Host HoneyDB 2023-05-08 00:00:00 2023-05-08 00:00:00 malicious-activity

Tags

bot abuse anonymization attacker imap pop3 sasl mail spam

Whois information

AS name
AS174 Rockion LLC
AS registry
arin
AS date
2021-08-05 00:00:00
AS CIDR
140.228.21.0/24
CIDR
140.228.16.0/20
Registrant
Rockion LLC
Address
685 East 380 South
City
Montreal
State
UT
Postal code
H3H
Country
CA — Canada 🇨🇦
Contact email
[email protected]
First indexed
2023-05-08 18:29:55
Last updated
2026-09-11 10:41:02

Malicious IPs in the same CIDR

140.228.21.126 140.228.21.82 140.228.21.11 140.228.21.90 140.228.21.117 140.228.21.216 140.228.21.99 140.228.21.227 140.228.21.125 140.228.21.142 140.228.21.91 140.228.21.13 140.228.21.96 140.228.21.116 140.228.21.218 140.228.21.221 140.228.21.97 140.228.21.128