216.25.90.14
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.
216.25.90.14 is an IP address from within our whitelist belonging to the subnet 216.25.88.0/21, which we identify as "Cortex Xpanse".
| ISP | Palo Alto Networks, Inc |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS396982 |
| Domain Name | paloaltonetworks.com |
| Country | 🇺🇸 United States of America |
| City | Atlanta, Georgia |
ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 216.25.90.14
This IP address has been reported a total of 28 times from 24 distinct sources. 216.25.90.14 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: France with 8 reports; United States of America with 7 reports; Germany with 3 reports. The most common categories in these recent reports were: Port Scan 26 times; Hacking 7 times; Brute-Force 2 times; Bad Web Bot 1 time; Spoofing 1 time; Other 2 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | ||
| 🇫🇷 Little Iguana |
trying to access non-authorized port
|
Port Scan | ||
| 🇳🇱 overture.bar |
on n.small [5289/tcp] SPT: 51218 TTL: 251 LEN: 44 TOS: 0x00
|
Port Scan | ||
| 🇫🇷 Kejult |
|
Port Scan | ||
| 🇺🇸 xmission.com |
|
Port Scan | ||
| 🇫🇷 Kejult |
|
Port Scan | ||
| 🇬🇧 essinghigh |
IPS Detection: 216.25.90.14 -> DPT: 20256
|
Port Scan | ||
| 🇧🇾 sashan |
|
Port Scan | ||
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:55256 dst:5432
|
Port Scan | ||
| 🇫🇮 dnsbd.tech |
nftables: Port scan (UDP:19) [srv2]
|
Port Scan Hacking | ||
| 🇺🇸 RAP |
2026-10-27 16:58:56 UTC Unauthorized activity to TCP port 3306.
|
Port Scan | ||
| 🇺🇸 etu brutus |
216.25.90.14 Blocked by [Attack Vector List]
...
|
Hacking Brute-Force Exploited Host | ||
| 🇩🇪 _ArminS_ |
SP-Scan 51252:2601 detected 2026.10.27 17:36:27
blocked until 2026.12.16 10:39:14
|
Port Scan | ||
| 🇨🇦 DRI |
Unsolicited TCP traffic on Honeypot, srcport=54342 dstport=28015
|
Port Scan Hacking | ||
| 🇺🇸 xmission.com |
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩