Scanning activity - Administrator Guide - Cortex CLOUD

Cortex Cloud Posture Management Documentation

Product
Cortex Cloud Application Security > Cortex CLOUD
License
Cloud Posture Management
Creation date
2025-01-22
Last date published
2026-06-10
Category
Administrator Guide

Cortex Xpanse at Palo Alto Networks takes an outside-in approach to network security and asset management. We continuously scan the global internet to monitor our customers' internet-facing attack surface and discover emerging threats.

Our scanning activity on the ranges below is CFAA-compliant. You can mark our ranges as non-malicious in your system so that you stop getting alerts, or configure your firewall to drop traffic from our ranges.

35.203.210.0/23
144.86.173.0/24
147.185.132.0/23
162.216.149.0/24
162.216.150.0/24
172.105.147.0/24
198.235.24.0/24
205.210.31.0/24
216.25.88.0/21

2604:a940:300:5b6:0:0:0:0/64 
2604:a940:301:225:0:0:0:0/64 
2604:a940:302:118:0:0:0:0/64 

If you believe you have discovered abuse associated with Cortex Xpanse scans, please contact us at scaninfo@paloaltonetworks.com.