AS22773 Cox Communications Inc.

AS22773Cox Communications Inc.ISP

WHOIS Topology

United States · ARINcox.com

Hosts top sitesCDNHome broadbandRPKI filteringTor relaysVPS hosting

IPv4 addresses

13,760,768

4,938 announced prefixes

IPv6 addresses

1.66 × 10³⁰

1,460 announced prefixes

BGP neighbours

…

CAIDA rank

#113

Customer cone 500 ASNs

Estimated users

8.08M

APNIC: 8.07M

RPKI

98% valid

0 invalid · 135 not covered

Average purity

1,710 sampled IPs

IXPs / facilities

0 / 14

Operator self-reported

History

How prefixes were announced and changed hands, registration changes, and outage or hijack incidents.

Loading routing history…

IP ranges

Currently announced prefixes with their RIR registration and geolocation.

Prefix	RPKI	Registration	Geolocation	Addresses
70.160.0.0/11	Valid	—	Portsmouth	2,097,152
72.192.0.0/11	Valid	—	Southington	2,097,152
98.160.0.0/11	Valid	—	Phoenix	2,097,152
68.0.0.0/12	Valid	—	Virginia Beach	1,048,576
68.96.0.0/12	Valid	—	Virginia Beach	1,048,576
174.64.0.0/12	Valid	—	Baton Rouge	1,048,576
184.176.0.0/12	Valid	—	Oklahoma City	1,048,576
24.248.0.0/13	Valid	—	Phoenix	524,288
68.224.0.0/13	Valid	—	Las Vegas	524,288
50.158.0.0/15	Valid	—	Las Vegas	131,072
68.4.0.0/15	Valid	—	Mission Viejo	131,072
68.6.0.0/15	Valid	—	Santa Barbara	131,072
68.102.0.0/15	Valid	—	Wichita	131,072
70.160.0.0/15	Valid	—	Portsmouth	131,072
24.120.0.0/16	Valid	—	Las Vegas	65,536
24.234.0.0/16	Not found	—	Las Vegas	65,536
24.251.0.0/16	Valid	—	Phoenix	65,536
66.210.0.0/16	Valid	—	Phoenix	65,536
68.2.0.0/16	Valid	—	Phoenix	65,536
68.3.0.0/16	Valid	—	Phoenix	65,536

Only the first 500 prefixes are listed; address counts and geography use all prefixes.

/24 block profile

One square per /24: colour shows the risk type, shade how many addresses are flagged, stripes mark datacenter blocks. Click a square to see all 256 addresses.

/24s with data 1,486 / 53,753 （3%） · flagged 601

No risk flagsDatacenter (no flags)ProxyVPNAbuse / blocklistTorDarker = more flagged addresses; dashed = block screen only

70.160.0.0/11275/8192 with data · 130 flagged

72.192.0.0/11247/8192 with data · 96 flagged

98.160.0.0/11212/8192 with data · 102 flagged

68.0.0.0/12133/4096 with data · 40 flagged

68.96.0.0/12118/4096 with data · 36 flagged

174.64.0.0/12105/4096 with data · 38 flagged

184.176.0.0/1269/4096 with data · 33 flagged

24.248.0.0/1353/2048 with data · 10 flagged

68.224.0.0/1347/2048 with data · 15 flagged

24.234.0.0/1632/256 with data · 28 flagged

24.120.0.0/1621/256 with data · 2 flagged

92.71.80.0/209/16 with data · 1 flagged

Hover a square for its numbers; click to see all 256 addresses.

Each prefix shows its 64 /24s with the most data. Built daily from lookups, neighbour sampling, public lists and block screening.

IP reputation

IPs from this network that CleanIP has analysed: purity, abuse reports and the riskiest /24 blocks.

Purity distribution

85–100 1,16870–84 40550–69 760–49 61

0.10%

Share of IPv4 reported or blocklisted

12,136

Listed IPs

1,710

Analysed IPs

Riskiest /24 blocks

/24 block	Flagged	Analysed
184.178.172.0/24	11	11
72.195.34.0/24	4	6
184.181.217.0/24	4	4
70.166.167.0/24	3	3
174.77.111.0/24	2	3
98.170.57.0/24	2	3
174.64.199.0/24	2	2
174.75.211.0/24	2	2
184.182.240.0/24	2	2
24.249.199.0/24	2	2

Flagged = VPN, proxy, Tor or purity below 50. Samples come from user lookups and neighbour sampling, not every address in this network.

Geography

Where this network’s IPv4 addresses are located.

United States99.8%
Canada0.1%
Colombia0.1%
Mexico0.0%
United Kingdom0.0%
France0.0%

Scope: Single country
In registered country: 99.8%

Estimated by sampling IPv4 ranges against a geolocation database.

Traffic observation

AS22773 · Last 7 days

Mobile vs. Desktop

Desktop66.5%Mobile33.5%

Bot vs. Human

Human76.3%Bot23.7%

Adoption & Usage

Adoption and usage of key protocols

Internet Protocol (IP) Version

IPv459.0%IPv641.0%

HTTP Version

HTTP/1.x

12.0%HTTP/2

65.1%HTTP/3

22.9%

HTTP vs. HTTPS

99.0% HTTPS (encrypted)

Plain HTTP 1.0%

TLS Version

TLS 1.0/1.1< 0.1%TLS 1.24.7%TLS 1.372.1%QUIC23.2%

Security & Attacks

Insights into network and application layer attack traffic

Layer 7 Attacks

GET

77.4%POST

20.0%HEAD

1.2%OPTIONS

0.9%PATCH

0.4%Other

< 0.1%

BGP Announcements

Hourly BGP route announcements over the last 7 days

39,855,753

7-day total

3,658,882

Hourly peak

Data: Cloudflare Radar, licensed under CC BY-NC 4.0

Activity

Hourly traffic over the last 7 days, normalized to this network’s peak.

A pronounced day/night rhythm, typical of networks with human users.

	00						06						12						18
Mon
Tue
Wed
Thu
Fri
Sat
Sun

Times in UTCLessMore

Peak hour: 00:00–01:00
Active hours: 20 hrs
Weekend vs weekday: Weekdays ≈ weekends
Busiest day: Tue

Loading…

BGP upstreams and neighbours

AS22773Standalone page

Loading upstreams and neighbours…

WHOIS record

The registry’s record for this AS number: holder, status, dates and contacts.

Sources

Where the information on this page comes from and when it was updated.

Information	Source	Updated
Registered country	RIR daily delegation statistics	2026-10-20
Registered address & allocation date	RIR registration data (RDAP)	2026-09-26
Organization & company country	AS-to-organization data	2026-10-21
Network type	CleanIP ASN canon	2026-10-21
Exchanges & facilities	Operator self-reported interconnection data	2026-10-21
Announced prefixes & BGP neighbours	Public BGP routing data	2026-10-22
IPv4 geography	Geolocation database	—
RPKI validation	RPKI ROA validation data	2026-10-22
Rank & customer cone	CAIDA AS Rank	2026-10-01
Estimated users (APNIC)	APNIC Labs user estimates	2026-10-19
Network tags	Public routing data community tags	2026-10-21
IP reputation	CleanIP lookups and neighbour sampling	—

The page is taking longer to start. Some resources may not have loaded. Please try reloading.

Reload page

Multi-source cross-checks · In-house reputation data · Real data only