Scanning activity

Cortex Xpanse

Creation date
2025-06-18
Last date published
2025-09-16

Cortex Xpanse at Palo Alto Networks takes an outside-in approach to network security and asset management. We continuously scan the global internet to monitor our customers' internet-facing attack surface and discover emerging threats.

Our scanning activity on the ranges below is CFAA-compliant. You can mark our ranges as non-malicious in your system so that you stop getting alerts, or configure your firewall to drop traffic from our ranges.

35.203.210.0/23
144.86.173.0/24
147.185.132.0/23
162.216.149.0/24
162.216.150.0/24
172.105.147.0/24
198.235.24.0/24
205.210.31.0/24
216.25.88.0/21

2604:a940:300:5b6:0:0:0:0/64 
2604:a940:301:225:0:0:0:0/64 
2604:a940:302:118:0:0:0:0/64 

If you believe you have discovered abuse associated with Cortex Xpanse scans, please contact us at scaninfo@paloaltonetworks.com.