140.228.21.216

Classification: Malicious

140.228.21.216 is a malicious IP address. Reported by 6 threat sources, last seen 2026-09-11. Network: AS174 Rockion LLC.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
VPN IPWhois.io 2026-09-11 10:40:55 2026-09-11 10:40:55 anonymization vpn
HTTP Spammer StopForumSpam.com 2023-08-18 00:43:54 2026-09-09 07:30:32 attacker malicious-activity
Suspicious Host AbuseIPDB 2026-01-17 16:30:43 2026-04-23 20:36:02 anomalous-activity
Bruteforce Blocklist.net.ua 2026-04-23 12:50:15 2026-04-23 12:50:15 malicious-activity
Mail Spammer Blocklist.de 2026-01-14 10:38:12 2026-01-16 03:45:18 malicious-activity
IMAP Attacker Blocklist.de 2026-01-14 10:23:44 2026-01-16 03:03:32 malicious-activity
DDoS attack on site privatbank-online.com.ua Blocklist.net.ua 2023-09-27 06:04:49 2024-09-24 14:44:15 malicious-activity
Mail Spammer Abuseat.org 2023-08-18 00:43:55 2023-08-18 00:43:55

Tags

bot abuse attacker imap pop3 sasl mail spam

Whois information

AS name
AS174 Rockion LLC
AS registry
arin
AS date
2021-08-05 00:00:00
AS CIDR
140.228.21.0/24
CIDR
140.228.16.0/20
Registrant
Rockion LLC
Address
685 East 380 South
City
Montreal
State
UT
Postal code
H3H
Country
CA — Canada 🇨🇦
Contact email
[email protected]
First indexed
2023-08-18 00:43:54
Last updated
2026-09-11 10:40:56

Malicious IPs in the same CIDR

140.228.21.126 140.228.21.82 140.228.21.11 140.228.21.90 140.228.21.117 140.228.21.216 140.228.21.99 140.228.21.227 140.228.21.125 140.228.21.142 140.228.21.91 140.228.21.13 140.228.21.96 140.228.21.116 140.228.21.218 140.228.21.221 140.228.21.97 140.228.21.128