216.25.90.13
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.
216.25.90.13 is an IP address from within our whitelist belonging to the subnet 216.25.88.0/21, which we identify as "Cortex Xpanse".
| ISP | Palo Alto Networks, Inc |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS396982 |
| Domain Name | paloaltonetworks.com |
| Country | 🇺🇸 United States of America |
| City | Atlanta, Georgia |
ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 216.25.90.13
This IP address has been reported a total of 48 times from 35 distinct sources. 216.25.90.13 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 13 reports; France with 10 reports; Germany with 4 reports. The most common categories in these recent reports were: Port Scan 43 times; Hacking 8 times; Brute-Force 3 times; Bad Web Bot 2 times; DDoS Attack 1 time; Other 3 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 donarev419 |
Connection to port 995 with data transfer.
Data preview: o
|
Port Scan Hacking | ||
| 🇺🇸 donarev419 |
Connection to port 4343 with data transfer.
Data preview:
|
Port Scan Hacking | ||
| 🇩🇪 phil2k |
|
DDoS Attack Port Scan | ||
| 🇫🇷 Petre 21_ip |
|
Port Scan | ||
| 🇺🇸 xmission.com |
|
Port Scan | ||
| 🇹🇷 savasboluk |
Auto-blocked by Seczar SecureOps — Crypto Miner / C2 Outbound (7 events in 5min) at 2026-10-28 03:41
|
Exploited Host | ||
| 🇺🇸 RAP |
2026-10-28 02:18:36 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | ||
| 🇫🇷 Kejult |
|
Port Scan | ||
| 🇳🇱 donarev419 |
Connection to port 8888 with data transfer.
Data preview:
|
Port Scan Hacking | ||
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:53863 dst:23
|
Port Scan | ||
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
|
Port Scan | ||
| 🇬🇧 Steve |
Attempts against Pop3/IMAP
|
Brute-Force | ||
| 🇩🇪 DasDuo |
|
Port Scan | ||
| 🇫🇷 Kejult |
|
Port Scan | ||
| 🇺🇸 donarev419 |
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩