asn.dev

Autonomous system

AS36352 AS-COLOCROSSING

Hosting ARIN

IPv4 addresses 972K 1,302 prefixes
IPv6 prefixes 16 counted as prefixes, not addresses
Countries 1 mostly US
Flagged prefixes 8 see address space

Summary

ColoCrossing

United States · AI-generated

hosting vps colo

A US colocation and VPS/dedicated-server provider headquartered in Buffalo, New York, announcing as AS-COLOCROSSING. It runs data-center space and resells a large volume of budget VPS and dedicated servers.

What it's used for

  • Colocation, dedicated servers, and low-cost VPS, much of it sold on to resellers and downstream hosts.

Notable

  • An IP here identifies ColoCrossing as the host, not the operator of the content. As a large low-cost VPS/reseller network it appears frequently in abuse and reputation datasets, so an IP here says little about who is behind a given service.

Interesting

  • ColoCrossing is closely associated with a cluster of budget-VPS brands, so a single physical footprint can surface under many different customer-facing names.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Address space

Summary

Full explorer
CountryNamePrefixes
USUnited States of America1,318

Registry

Allocation record

via ARIN RDAP
Registry
ARIN
Handle
AS36352
Registry name
AS-COLOCROSSING
Registrant
HostPapa
Abuse contact
net-abuse-global@hostpapa.com
Registered
2005-12-12
Last changed
2024-01-04
Status
active

Reputation

Classification and threat

Hosting Datacenter or cloud provider. Addresses are servers, not people.

4 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
104.223.118.62Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Data Theft and Extortion2025-09-12
96.44.189.109Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Data Theft and Extortion2025-09-12
96.44.191.141Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Data Theft and Extortion2025-09-12
96.44.191.157Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Data Theft and Extortion2025-09-12

Threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check