23.94.112.16
## IP Intelligence Briefing: 23.94.112.16
Classification: Low Risk Infrastructure IP
Risk Score: 25/100
Report Date: Current Intelligence Cycle
---
Executive Summary
IP 23.94.112.16 is classified as low risk with a reputation score of 25. The address belongs to colocrossing.com infrastructure in Los Angeles, California, United States. No active threats or malicious campaigns observed. Minimal operator risk profile with route stability concerns noted.
---
Technical Profile
- ASN: 36352
- BGP Prefix: 23.94.112.0/24
- Geolocation: Los Angeles, California, US (accuracy radius: 2500km)
- DNS Resolution: 23-94-112-16-host.colocrossing.com
- Network State: Firewalled / No Open Services
- DNSBL Status: Listed on 1 of 8 total blacklists
Risk Assessment
| Metric | Value | Assessment |
|---|---|---|
| Risk Score | 25 | Low |
| Provider Score | 0 | N/A |
| Authority Score | 0 | N/A |
| Operator Score | 0.1304 | Minimal |
| Abuse Confidence | Not Available | Low |
Threat Indicators
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- Blacklist Count: 1
- Honeypot Hits: 0
- WAF Violations: 0
- Known Campaigns: None
Observation History (13 Total Observations)
Recent signals indicate mixed geolocation reporting with one observation (July 26, 2026) showing listing on threat feeds with high severity. Overall threat persistence days: 0. No persistent malicious behavior detected.
Network Relationships
- DNS Associations: Single hostname (23-94-112-16-host.colocrossing.com)
- Organizational Links: None identified
- Subnet Relationships: None identified
Neighborhood Analysis (23.94.112.0/24)
- Total Siblings: 0
- Active Siblings: 0
- Threat Siblings: 0
- Abuse Density: 0
- Subnet Classification: No inherited risk
Recommended Actions
Status: Monitor / Low Priority
Given the low-risk classification and absence of active threat indicators:
1. No immediate blocking required - IP shows benign infrastructure characteristics
2. Continue monitoring - One DNSBL listing warrants periodic review
3. Route stability flagged - isRouteStable=false; verify upstream routing if network issues occur
4. Geolocation uncertainty - 2500km accuracy radius; corroborate with additional sources for precise location
Intelligence Summary
IP 23.94.112.16 represents standard hosting infrastructure with no evidence of malicious activity. The single DNSBL listing requires periodic review but does not indicate active threat. No immediate defensive actions recommended beyond standard monitoring practices.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | HostPapa |
| ASN | AS36352 |
| Network Name | CC-16 |
| CIDR Block | 23.94.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 23-94-112-16-host.colocrossing.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 23-94-112-16-host.colocrossing.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS36352 |
| Network Prefix | 23.94.112.0/24 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 22% | 1 | 1 |
| routing | 22% | 1 | 1 |
| services | 22% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 11% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-13 09:17:34 UTC |
| Last Seen | 2026-09-29 03:07:46 UTC |
| Profile Built | 2026-09-27 08:42:57 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 23.94.112.16
Who owns the IP address 23.94.112.16?
23.94.112.16 is registered to HostPapa. The address falls within the 23.94.0.0/15 network block. Registration is held at ARIN.
Where is 23.94.112.16 located?
Geolocation data places 23.94.112.16 in Los Angeles, California, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 23.94.112.16 malicious or safe?
23.94.112.16 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 23.94.112.16?
The reverse DNS (PTR) record for 23.94.112.16 is 23-94-112-16-host.colocrossing.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.