Cox Communications IP Ranges
Cox Communications is a regional US cable operator, registered with ARIN as AS22773 under the AS name ASN-CXA-ALL-CCI-22773-RDC since November 2001. It puts close to five thousand separate IPv4 prefixes into the routing table, several times what much larger carriers announce.
- Provider
- Cox Communications
- Primary ASN
- AS22773
- Category
- ISP
- Headquarters
- Atlanta, GA, USA
- Announced IPv4 prefixes
- 4813
- Registry
- ARIN
Known IP ranges
These prefixes are currently announced to the global routing table by AS22773 (ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.). Prefix sets change over time - use WHOIS Lookup for the authoritative record on any specific address.
70.160.0.0/11
72.192.0.0/11
98.160.0.0/11
68.96.0.0/12
174.64.0.0/12
184.176.0.0/12
68.0.0.0/12
68.224.0.0/13
24.248.0.0/13
70.160.0.0/15
2600:8800::/28
2a0e:4fc0::/29
2a0a:cd40::/29 (IPv6)
What does a Cox Communications IP mean in a privacy test?
A Cox address as your visible IP means the connection left over your own Cox line with nothing tunnelling it. Cox is a regional operator rather than a national one, so the address narrows the location more than a nationwide carrier's would, and its reverse DNS narrows it further by naming the market the line is served from.
Where to get Cox's address list
Cox does not publish a range file, and there is no operational reason for a residential ISP to have one. The registry is the source instead: ARIN holds AS22773 under the AS name ASN-CXA-ALL-CCI-22773-RDC, registered to Cox Communications Inc. on 20 November 2001, and the blocks above are the largest currently announced under it. The AS22773 page carries the same record with the routing detail.
The count is what matters if you intend to build a filter from those blocks. Cox announces close to five thousand IPv4 prefixes, many of them long and specific, where carriers with several times the footprint announce a few hundred aggregates - Deutsche Telekom manages its German network on under nine hundred. A rule copied from the handful of large blocks above therefore misses a great deal of Cox, and a rule built from the full announcement list is thousands of lines that change without notice. Matching on the ASN is the version of this that stays correct.
What a Cox address narrows down
Everything on AS22773 is subscriber access - residential cable, business cable and the equipment serving them - so an address here is a customer line rather than a machine somebody rented. The reverse DNS then places it. Cox names addresses as ip followed by the four octets, then a market label, then cox.net: 70.160.0.1 answers as ip70-160-0-1.hr.hr.cox.net. The label between the address and the domain is the serving market, which is a finer statement of place than the ASN alone can make.
Two limits come with that. A market code says where the line is served from, not where the person is, and it does not move when a laptop does. And a Cox address is not evidence about who is behind it: cable addresses are assigned dynamically, a household can be handed a different one after an outage or a modem swap, and the same address will belong to somebody else later. It describes a connection at a moment, not an account.
Related tools
Frequently asked questions
What IP ranges does Cox use?
Cox announces its address space under AS22773, registered with ARIN to Cox Communications Inc. The largest blocks currently routed there are listed above, including 70.160.0.0/11, 72.192.0.0/11 and 98.160.0.0/11. Cox publishes no allowlist file, so the ARIN record and the routing table are the checkable sources.
Why does a Cox IP appear in my privacy test?
A Cox address as your visible IP means the connection left over your own Cox line with nothing tunnelling it. Cox is a regional operator rather than a national one, so the address narrows the location more than a nationwide carrier's would, and its reverse DNS narrows it further by naming the market the line is served from.
What does the label in a cox.net hostname mean?
It is Cox's market code for the address. Cox names addresses as ip plus the four octets, then a market label, then cox.net, so 70.160.0.1 answers as ip70-160-0-1.hr.hr.cox.net. The label identifies the serving market rather than the customer, and it does not change when a device moves around the house.
Why does Cox announce so many separate IP ranges?
AS22773 carries close to five thousand IPv4 prefixes, where nationally larger networks announce a few hundred aggregates. The practical effect is that any list copied from a few large Cox blocks will be incomplete, so matching on the ASN is more reliable than matching on a prefix list somebody pasted once.
Does Cox publish an IP allowlist?
No, and there would be little use for one. An allowlist exists so other networks can admit a service's servers; Cox's space carries customers instead. The ARIN record for AS22773 and the prefixes it announces are the list that can be checked, and this site's AS22773 page shows them.