# 147.185.132.245 — IP Intelligence Summary

147.185.132.245 is an IPv4 address operated by Palo Alto Networks, Inc (AS396982), geolocated to CA, United States. As of October 8, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/147.185.132.245
- Last updated: 2026-10-08

## Ownership

- Organization: Palo Alto Networks, Inc
- Network name: PAN-22
- Allocated block: 147.185.132.0/22
- ASN: AS396982 (https://ipdebrief.com/asn/396982)
- Regional registry: ARIN

## Location

- City: CA
- Region: CA
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 147.185.132.245/32

**Classification:** Low Risk | **Last Updated:** 2026-07-26T18:38:00Z

\---

\## Executive Summary

IP address 147.185.132.245 is located in the United States (California region). The IP demonstrates a low-risk profile with a current risk score of 0. No active services or open ports are detected; the IP is classified as "Firewalled / No Services." Historical signals indicate intermittent blacklist activity with one listing at high severity across eight total lists.

\---

\## Key Findings

\### Current Risk Profile

\- **Risk Score:** 0

\- **Reputation:** Low Risk

\- **Provider/Ownership:** Not identified (ASN: null)

\- **Geolocation:** United States (US), California (CA)

\- **Network Role:** Firewalled / No Services

\- **Classification Flags:** Not a provider, CDN, VPN, proxy, Tor exit, or hosting service

\### Threat Indicators

\- **Blacklist Status:** 8 total lists, 1 listing active

\- **Maximum Severity:** High

\- **AlienVault OTX:** Threat presence detected (50 pulse signals)

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\### Network Behavior

\- **DNS Resolution:** Forward confirmed: No

\- **Reverse DNS:** No PTR records

\- **Open Ports:** None detected

\- **TLS/HTTP Services:** None detected

\- **WAF Violations:** 0

\- **Honeypot Hits:** 0

\- **Enumeration Strikes:** 0

\---

\## Historical Analysis

Eight signal observations recorded between 2026-07-26T18:37:57Z and 2026-07-26T18:38:12Z:

1. **DNSSEC Validation:** Valid (confidence: 0.90)

2. **Blacklist Activity:** High severity listing detected (confidence: 0.85)

3. **Geolocation Signals:** US coordinates (37.75°N, -97.82°W) with threat indicators present (confidence: 0.95)

4. **IP Reputation:** Multiple signals from threat feeds with confidence ranging from 0.17 to 0.95

The IP has shown minimal threat persistence with 0 threat observation days and 0 ownership changes recorded.

\---

\## Relationship Analysis

No direct relationships identified. The IP has no known associations with:

\- Related subnets

\- Hostnames

\- Organizations

\- Certificates

\---

\## Neighborhood Assessment (147.185.132.0/24)

\- **Subnet:** 147.185.132.0/24

\- **Total Siblings:** 56

\- **Abuse Density:** 0

\- **Risk Distribution:** 0 high, 13 medium, 40 low

\- **Inherited Risk:** 0

Notable neighbors include:

\- 147.185.132.9 (risk: 40, authority: 50)

\- 147.185.132.20 (risk: 25, authority: 50)

\- 147.185.132.35 (risk: 25, authority: 50)

The subnet exhibits low-to-moderate risk distribution with no high-risk neighbors.

\---

\## Recommended Actions

**Current Status:** No automatic firewall rules or recommendations generated.

**Suggested Actions for SOC Analysts:**

1. Monitor blacklist status due to high-severity listing detected

2. Consider traffic filtering based on organizational threat tolerance

3. Verify geolocation accuracy for threat intelligence correlation

4. No immediate blocking recommended given low current risk score

\---

\## Intelligence Confidence

**Data Sufficiency:** Limited (various dimensions incomplete)

**Overall Confidence:** Low to Moderate

**Key Limitation:** No provider/organization data available; limited service detection

\---

**Briefing Generated:** IPDebrief Intelligence Platform

**Data Sources:** IPDebrief, AlienVault OTX, Multiple Threat Feeds

## Nearby addresses

- 147.185.132.9 (https://ipdebrief.com/147.185.132.9)
- 147.185.132.15 (https://ipdebrief.com/147.185.132.15)
- 147.185.132.18 (https://ipdebrief.com/147.185.132.18)
- 147.185.132.19 (https://ipdebrief.com/147.185.132.19)
- 147.185.132.20 (https://ipdebrief.com/147.185.132.20)
- 147.185.132.35 (https://ipdebrief.com/147.185.132.35)
- 147.185.132.38 (https://ipdebrief.com/147.185.132.38)
- 147.185.132.39 (https://ipdebrief.com/147.185.132.39)
- 147.185.132.45 (https://ipdebrief.com/147.185.132.45)
- 147.185.132.51 (https://ipdebrief.com/147.185.132.51)
- 147.185.132.53 (https://ipdebrief.com/147.185.132.53)
- 147.185.132.61 (https://ipdebrief.com/147.185.132.61)

---

Source: IPDebrief, "147.185.132.245 IP intelligence", https://ipdebrief.com/147.185.132.245, updated 2026-10-08. Assessments are probabilistic.