140.228.21.227

Classification: Malicious

140.228.21.227 is a malicious IP address. Reported by 5 threat sources, last seen 2026-09-11. Network: AS174 Rockion LLC.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
VPN IPWhois.io 2026-05-25 05:48:43 2026-09-11 10:40:55 anonymization vpn
HTTP Spammer StopForumSpam.com 2025-10-06 12:45:10 2026-08-16 07:28:31 attacker malicious-activity
Parasite SEO Blocklist.net.ua 2026-07-03 16:16:26 2026-07-03 16:16:26 attacker malicious-activity
Suspicious Host AbuseIPDB 2024-11-07 18:01:42 2026-04-23 08:16:24 anomalous-activity
Malicious Host AbuseIPDB 2026-03-21 20:13:08 2026-03-27 01:45:20 malicious-activity
Mail Spammer Blocklist.de 2026-03-21 08:01:16 2026-03-22 08:01:23 malicious-activity
IMAP Attacker Blocklist.de 2026-03-21 07:00:53 2026-03-22 07:01:11 malicious-activity
Bruteforce Blocklist.net.ua 2026-03-12 12:42:29 2026-03-21 12:44:45 malicious-activity

Tags

bot abuse attacker imap pop3 sasl mail spam

Whois information

AS name
AS174 Rockion LLC
AS registry
arin
AS date
2021-08-05 00:00:00
AS CIDR
140.228.21.0/24
CIDR
140.228.16.0/20
Registrant
Rockion LLC
Address
184 East Snowy Egret Dr.
City
Montreal
State
UT
Postal code
H3H
Country
CA — Canada 🇨🇦
Contact email
[email protected]
First indexed
2024-11-08 07:02:32
Last updated
2026-09-11 10:40:56

Malicious IPs in the same CIDR

140.228.21.126 140.228.21.82 140.228.21.11 140.228.21.90 140.228.21.117 140.228.21.216 140.228.21.99 140.228.21.227 140.228.21.125 140.228.21.142 140.228.21.91 140.228.21.13 140.228.21.96 140.228.21.116 140.228.21.218 140.228.21.221 140.228.21.97 140.228.21.128