# 147.185.132.107 — IP Intelligence Summary

147.185.132.107 is an IPv4 address operated by Palo Alto Networks, Inc (AS396982), geolocated to CA, United States. As of September 3, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/147.185.132.107
- Last updated: 2026-09-03

## Ownership

- Organization: Palo Alto Networks, Inc
- Network name: PAN-22
- Allocated block: 147.185.132.0/22
- ASN: AS396982 (https://ipdebrief.com/asn/396982)
- Regional registry: ARIN

## Location

- City: CA
- Region: CA
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# INTELLIGENCE BRIEFING: 147.185.132.107/32

**Classification:** LOW RISK / ENTERPRISE INFRASTRUCTURE

**Date:** Current Analysis Cycle

**Target:** 147.185.132.107/32

\---

\## Executive Summary

The target IP address 147.185.132.107/32 is associated with Palo Alto Networks, Inc (AS396982) and is classified as Low Risk (Risk Score: 20/100). No malicious activity, blacklist entries, or threat indicators were observed. The IP is part of a clean subnet with minimal abuse density and shows no persistent malicious behavior over the observation period.

\---

\## Ownership and Network Classification

| Attribute | Value |

|-----------|-------|

| Organization | Palo Alto Networks, Inc |

| ASN | 396982 |

| Network Block | 147.185.132.0/22 |

| RIR | ARIN |

| Service Purpose | Firewalled / No Services |

| Geolocation | US (CA region) |

The IP belongs to Palo Alto Networks' PAN-22 network infrastructure. The organization is a legitimate enterprise with established abuse contact channels (dl-ipabuse@paloaltonetworks.com).

\---

\## Threat Assessment

**Current Risk Indicators:**

\- Risk Score: 20/100 (Low)

\- Abuse Confidence Score: Not applicable

\- Blacklist Count: 0

\- Known Campaigns: None

\- Tor Exit Node: No

\- Known Attacker: No

\- Spam Source: No

**Network Role Classification:**

\- Cloud Infrastructure: No

\- CDN: No

\- VPN: No

\- Proxy: No

\- Hosting Provider: No

\- Mobile/Residential: No

\- Anycast: No

\---

\## Service Exposure Analysis

**Open Ports:** None detected

**TLS Certificate:** Not present

**HTTP Service:** Not active

**Email Authentication:** Not configured (no SPF/DMARC records)

The IP address shows no active services or open ports, indicating it is configured for internal use or administrative traffic only.

\---

\## Neighborhood Context (147.185.132.0/24 Subnet)

| Metric | Value |

|--------|-------|

| Total Subnet IPs | 57 |

| Active Siblings | 26 |

| Abuse Density | 0% |

| Subnet Classification | Clean |

| Threat-Sibling Count | 0 |

| Risk Distribution | 0 High, 14 Medium, 39 Low |

The subnet demonstrates minimal abuse activity with a clean classification. No threat siblings were identified in the immediate neighborhood.

\---

\## Observation History

**Analysis Period:** 15 signal observations

**Last Activity:** 2026-07-26

**Historical Findings:**

\- Ownership stability: No changes detected during observation period

\- Threat persistence: 0 days

\- Persistent malicious activity: None

\- Recent scans: Ports scanned with no services detected

\- Geolocation validation: Discrepancy noted (RTT 35ms vs. 152.5ms minimum expected for claimed 7,626km distance from probe location)

The geo-validation anomaly indicates routing or traffic path differences rather than malicious activity. This is common in enterprise networks with global routing infrastructure.

\---

\## Relationship Mapping

**Detected Relationships:** 3 (all to PAN-22 network)

\- Same Network: PAN-22 (x3)

No external relationships to hostnames, certificates, or organizations beyond the parent network.

\---

\## Recommended Security Actions

**Action:** No blocking recommended

**Rationale:** IP is owned by legitimate enterprise organization with no malicious indicators, blacklist entries, or threat activity.

**Firewall Policy:**

\- Allow inbound if required for legitimate business operations

\- Monitor for unusual outbound traffic patterns if this is a known internal asset

\- No WAF or blocking rules required

**Monitoring Priority:** LOW

\---

\## Intelligence Confidence

**Confidence Level:** HIGH

**Data Sources:** 8 DNSBL lists scanned (0 matches), multiple geolocation feeds, ownership registries

\---

**END OF BRIEFING**

## Nearby addresses

- 147.185.132.9 (https://ipdebrief.com/147.185.132.9)
- 147.185.132.15 (https://ipdebrief.com/147.185.132.15)
- 147.185.132.18 (https://ipdebrief.com/147.185.132.18)
- 147.185.132.19 (https://ipdebrief.com/147.185.132.19)
- 147.185.132.20 (https://ipdebrief.com/147.185.132.20)
- 147.185.132.35 (https://ipdebrief.com/147.185.132.35)
- 147.185.132.38 (https://ipdebrief.com/147.185.132.38)
- 147.185.132.39 (https://ipdebrief.com/147.185.132.39)
- 147.185.132.45 (https://ipdebrief.com/147.185.132.45)
- 147.185.132.51 (https://ipdebrief.com/147.185.132.51)
- 147.185.132.53 (https://ipdebrief.com/147.185.132.53)
- 147.185.132.61 (https://ipdebrief.com/147.185.132.61)

---

Source: IPDebrief, "147.185.132.107 IP intelligence", https://ipdebrief.com/147.185.132.107, updated 2026-09-03. Assessments are probabilistic.