JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

216.25.90.84

Neutral Activity Whitelisted Subnet

Abuse Confidence Score

0% Low Risk

42 reports

33 reporters · latest 28 minutes ago

216.25.90.84 is an IP address from within our whitelist belonging to the subnet 216.25.88.0/21, which we identify as "Cortex Xpanse".

ISP: Palo Alto Networks, Inc
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Domain Name: paloaltonetworks.com
Country: 🇺🇸 United States of America
City: Atlanta, Georgia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

42 from 33 distinct reporters

First reported

October 27th 2026

Most recent report

28 minutes ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 11 🇩🇪 Germany 6 🇫🇷 France 6

Most common categories Port Scan 36 Hacking 12 Brute-Force 6 SSH 3 Exploited Host 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-10-29 03:45:35 (28 minutes ago)	Port scan detected on port 135 (connection without data transfer)	Port Scan
🇺🇸 donarev419	2026-10-29 01:52:44 (2 hours ago)	Connection to port 20000 with data transfer. Data preview: d�	Port Scan Hacking
🇺🇸 xmission.com	2026-10-29 01:39:27 (2 hours ago)	Blocked by UFW (TCP on 25827) Source port: 51041 TTL: 251 Packet length: 44 TOS: 0x00 This report (for 216.25.90.84) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇫🇮 6kilowatti	2026-10-29 01:27:14 (2 hours ago)	2026-10-29T03:27:13.746008+02:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:08:00 SRC=216.25.90.84 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=55522 DPT=1443 WINDOW=65535 RES=0x00 SYN URGP ... show more 2026-10-29T03:27:13.746008+02:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:18:fd:74:f4:53:e7:08:00 SRC=216.25.90.84 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=55522 DPT=1443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-10-29 00:36:12 (3 hours ago)	Honeypot hit: Unauthorized traffic (243 bytes of payload); 8282 [2] TCP	Port Scan
Anonymous	2026-10-29 00:32:02 (3 hours ago)	Port scan / connection attempts on ports 23/TCP, 68/TCP, 80/TCP, 102/TCP, 106/TCP, 135/TCP, 161/UDP, 179/TCP, 427/TCP, 465/TCP, 500/UDP, 541/TCP, 554/TCP, 593/TCP, 888/TCP, 1026/TCP, 1112/TCP, 1234/TCP, 1801/TCP, 1812/UDP, 1900/UDP, 2082/TCP, 2084/TC ... show more Port scan / connection attempts on ports 23/TCP, 68/TCP, 80/TCP, 102/TCP, 106/TCP, 135/TCP, 161/UDP, 179/TCP, 427/TCP, 465/TCP, 500/UDP, 541/TCP, 554/TCP, 593/TCP, 888/TCP, 1026/TCP, 1112/TCP, 1234/TCP, 1801/TCP, 1812/UDP, 1900/UDP, 2082/TCP, 2084/TCP, 2121/TCP, 2160/TCP, 2300/TCP, 2362/UDP, 2455/TCP, 2484/TCP, 3389/TCP, 3390/TCP, 3929/TCP, 4100/TCP, 4343/TCP, 4786/TCP, 5000/TCP, 5061/TCP, 5222/TCP, 5351/UDP, 5432/TCP, 5910/TCP, 6000/TCP, 6001/TCP, 6002/TCP, 6697/TCP, 6969/UDP, 7070/TCP, 7170/TCP, 7547/TCP, 8020/TCP, 8080/TCP, 8090/TCP, 8094/TCP, 8192/TCP, 8333/TCP, 8899/TCP, 9042/TCP, 9080/TCP, 9200/TCP, 9443/TCP, 9600/TCP, 9999/TCP, 10000/TCP, 10001/TCP, 10001/UDP, 10010/TCP, 10257/TCP, 10911/TCP, 12546/UDP, 12694/TCP, 13346/UDP, 13546/UDP, 13911/TCP, 13946/UDP, 17185/UDP, 18574/TCP, 20256/TCP, 21242/TCP, 23756/TCP, 25827/TCP, 31337/TCP, 37777/TCP, 37810/UDP, 44344/TCP, 44818/TCP, 47001/TCP, 50995/TCP, 51401/TCP, 52311/TCP, 53413/UDP to unused IP show less	Port Scan
🇺🇸 RAP	2026-10-29 00:07:51 (4 hours ago)	2026-10-29 00:07:51 UTC Unauthorized activity to TCP port 135.	Port Scan
🇫🇷 EvoX	2026-10-28 23:52:36 (4 hours ago)	🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 5905 [1] TCP	Port Scan
🇩🇪 phil2k	2026-10-28 21:00:45 (7 hours ago)	Firewall: Within 2026-10-27 07:10:10 - 2026-10-27 07:10:10 CET(+0100) identified: unallowed access from 216.25.90.84 on port 23(telnet) (1 trial) Fail2ban: Within 2026-10-27 07:10:10 - 2026-10-27 07:10:10 CET(+0100) banned: 1 times by fail2ban[firewa ... show more Firewall: Within 2026-10-27 07:10:10 - 2026-10-27 07:10:10 CET(+0100) identified: unallowed access from 216.25.90.84 on port 23(telnet) (1 trial) Fail2ban: Within 2026-10-27 07:10:10 - 2026-10-27 07:10:10 CET(+0100) banned: 1 times by fail2ban[firewall] show less	Port Scan Brute-Force
🇨🇭 dirtronin	2026-10-28 19:32:52 (8 hours ago)	Honeypot connection to elastic decoy port — banner-match: . Source: HyveHeim/HyveGuard tripwire (auto-report).	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2026-10-28 19:06:27 (9 hours ago)	Blocked by UFW (TCP on 8333) Source port: 50570 TTL: 251 Packet length: 44 TOS: 0x00 This report (for 216.25.90.84) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇫🇷 Kejult	2026-10-28 19:00:23 (9 hours ago)	Honeypot Finding: verified TCP multi-port scan/probing; 4 application-level events across 2 target ports and 4 source port(s). Ports: 7070/service, 8015/service. Sensors: Honeytrap.	Port Scan
🇳🇱 VMHeaven.io	2026-10-28 18:27:57 (9 hours ago)	Blocked by UFW [888/tcp] Source port: 53834 TTL: 244 Packet length: 44	Port Scan
🇫🇷 Kejult	2026-10-28 18:23:11 (9 hours ago)	Honeypot Finding: repeated TCP service probing on TCP/51200 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.	Port Scan
🇺🇸 xmission.com	2026-10-28 18:20:21 (9 hours ago)	Blocked by UFW (TCP on 5222) Source port: 52293 TTL: 251 Packet length: 44 TOS: 0x00 This report (for 216.25.90.84) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇱 176.52.133.171

🇺🇸 172.232.27.232

🇷🇺 145.255.8.204

🇨🇳 119.109.253.31

🇧🇩 103.65.135.6

🇩🇪 102.220.163.27

🇨🇳 47.114.107.233

🇳🇱 45.148.10.121

🇺🇸 2400:cb00:543:1000:1f33:fe62:4e05:6b83

🇨🇦 192.248.207.3

🇪🇨 191.99.82.146

🇨🇳 182.139.39.150

🇮🇳 182.77.70.166

🇺🇸 170.106.180.153

🇺🇸 156.244.150.175

🇨🇳 106.59.139.69

🇫🇷 85.217.140.30

🇺🇸 20.150.193.100

🇺🇸 17.166.237.86

🇺🇸 17.166.25.208