Autonomous system
AS54538 PAN0001
Unclassified ARIN
Summary
Palo Alto Networks
business cybersecurity corporate
PAN0001 is operated by Palo Alto Networks.
What it's used for
- The address space carries corporate infrastructure, evidenced by netnames such as
PAN-22,PAN, andIL-PALOALTOregistered to Palo Alto Networks entities. - The AS announces 7,168 IPv4 addresses across 22 prefixes and 4 IPv6 prefixes, with 12 observed neighbours. This ratio of address inventory to peering partners indicates an internal corporate estate rather than a transit or access network.
- Traffic from this AS consists of internal corporate endpoints, office workers, and security platform infrastructure for the global cybersecurity firm.
Notable
- Registrants consistently identify Palo Alto Networks, Inc. or related entities like Palo Alto Networks (Netherlands) B.V., aligning with the announcer.
- The inventory is finely subdivided into /23 and /24 blocks, reflecting site-by-site segmentation typical of a large multinational corporation.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
No exchange port on file. Many exchanges publish no participant list, so this is not proof of absence.
Transit providers
12 upstream, 0 downstream and 16 adjacent networks observed; most-used upstreams first.
| AS | Network | Paths seen |
|---|---|---|
| AS15830 | Equinix (EMEA) Acquisition Enterprises B.V. | 488 |
| AS6461 | Zayo Bandwidth | 378 |
| AS1680 | Cellcom Fixed Line Communication L.P | 246 |
| AS12182 | Unitas Global | 174 |
| AS3356 | Level 3 Parent, LLC | 167 |
| AS3910 | CenturyLink Communications, LLC | 116 |
| AS8220 | COLT Technology Services Group Limited | 104 |
| AS21859 | Zenlayer Inc | 58 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-11, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 22 prefixes · 7.17K addresses IPv6 4 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 26 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS54538- Registry name
- PAN0001
- Registrant
- PALO ALTO NETWORKS
- Abuse contact
- iaquino@paloaltonetworks.com
- Registered
- 2012-03-13
- Last changed
- 2012-03-13
- Allocation
- assigned
Routing security
RPKI and IRR
- RPKI
- 59% valid · 20 valid, 14 with no ROA
- ROAs
- 22 authorising AS54538
- ASPA
- no ASPA record
- IRR
- 71% registered · 24 of 34 announcements 1 other origin
- Route objects
- 43 naming AS54538
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
No DROP prefixes None of its announced space is on the DROP prefix list.
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 432 networks and 1,768 prefixes, as published 2026-10-12. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere