# IP Intelligence Briefing: 173.22.174.179/32
Classification: Low Risk Residential IP
Report Date: Current
Status: No Active Threat Indicators Detected
---
## Executive Summary
IP address 173.22.174.179 is a residential endpoint assigned to Mediacom Communications Corp. The IP presents a low-risk profile (risk score: 25) with no active threat indicators, no open services, and no association with known malicious campaigns. The IP is part of a clean subnet with zero abuse density.
---
## Ownership and Network Details
| Attribute | Value |
|---|---|
| **ISP/Provider** | Mediacom Communications Corp |
| **ASN** | 30036 |
| **CIDR Block** | 173.16.0.0/12 |
| **Network Name** | MEDIACOM-RESIDENTIAL-CUST |
| **RIR** | ARIN |
| **Abuse Contact** | Available via RDAP |
---
## Geolocation Data
| Field | Value |
|---|---|
| **Country** | United States |
| **Region** | Illinois |
| **City** | Momence |
| **Coordinates** | 40.63°N, -89.40°W |
| **Timezone** | America/Chicago |
| **Accuracy Radius** | 200 km |
| **Geo Consensus** | Validated |
*Note: Geo validation flagged as implausible in one observation, suggesting minor geolocation variance.*
---
## Threat Assessment
| Indicator | Status |
|---|---|
| **Risk Score** | 25 (Low Risk) |
| **Abuse Confidence** | Not applicable |
| **Blacklist Count** | 0 |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Tor Exit Node** | No |
| **Known Campaigns** | None |
| **Threat Persistence Days** | 0 |
| **Persistently Malicious** | No |
DNSBL Status: 1 listing out of 8 total lists examined
---
## Network Services Analysis
| Service Type | Status |
|---|---|
| **Open Ports** | None detected |
| **TLS Certificate** | None |
| **HTTP Banner** | None |
| **Service Classification** | Firewalled / No Services |
| **Infrastructure Type** | Residential endpoint |
| **Is Cloud/VPN/Proxy** | No |
| **Is Hosting** | No |
| **Is Mobile** | No |
---
## DNS and Hostname Resolution
| Field | Value |
|---|---|
| **PTR Hostnames** | 173-22-174-179.client.mchsi.com |
| **Forward Resolution** | Confirmed (1 hostname) |
| **Forward Hostname** | 173-22-174-179.client.mchsi.com |
| **Email Auth (SPF/DMARC)** | Present |
| **Domain** | mchsi.com |
---
## Control Plane and Routing
| Metric | Value |
|---|---|
| **BGP Prefix** | 173.22.172.0/22 |
| **Origin ASN** | 30036 |
| **Route Stability** | Unstable |
| **Route Changes (30d)** | 0 |
| **RPKI State** | Not applicable |
| **IRR Consistency** | Not applicable |
| **DNSSEC Valid** | Yes |
| **DNSBL Listed** | 1 list |
---
## Neighborhood Analysis
The IP resides in subnet 173.22.174.0/24 with the following characteristics:
| Metric | Value |
|---|---|
| **Subnet Abuse Density** | 0 (Clean) |
| **Total Siblings** | 1 |
| **Active Siblings** | 0 |
| **Threat Siblings** | 0 |
| **Classification** | Clean |
| **Inherited Risk** | 0 |
No neighboring IPs detected in the immediate subnet scope.
---
## Relationship Graph
Seven relationships identified:
- Same Network: Multiple associations to MEDIACOM-RESIDENTIAL-CUST network
- DNS Associations: Four associations to hostname 173-22-174-179.client.mchsi.com
---
## Observation History
Total observations: 19
Recent Activity Timeline:
- 2026-07-23 10:24:39 UTC: Geolocation signal (US, low confidence 0.35)
- 2026-07-23 10:24:05 UTC: Ownership stability signal (confidence 0.85)
- 2026-07-23 10:23:11 UTC: Network role classification (confidence 0.30)
- 2026-07-23 10:21:07 UTC: Organization attribution confirmed (confidence 0.90-0.95)
Trend Analysis: No evidence of escalating risk. Ownership remains consistent with Mediacom attribution. No threat persistence indicators.
---
## Recommendations
Security Actions: No immediate blocking or filtering required. The IP presents a low-risk residential profile with no active malicious indicators.
Monitoring Considerations:
- Monitor for changes in DNSBL listings
- Watch for emergence of open services on previously firewalled ports
- Track route stability changes if BGP anomalies appear
Context: This IP is a standard residential endpoint from Mediacom's residential customer block. No evidence suggests compromise or malicious use.
---
End of Briefing
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Mediacom Communications Corp |
| ASN | AS30036 |
| Network Name | MEDIACOM-RESIDENTIAL-CUST |
| CIDR Block | 173.16.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 173-22-174-179.client.mchsi.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 173-22-174-179.client.mchsi.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS30036 |
| Network Prefix | 173.22.172.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 11:15:57 UTC |
| Last Seen | 2026-08-26 10:35:52 UTC |
| Profile Built | 2026-08-29 08:22:41 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 173.22.174.179
Who owns the IP address 173.22.174.179?
173.22.174.179 is registered to Mediacom Communications Corp. The address falls within the 173.16.0.0/12 network block. Registration is held at ARIN.
Where is 173.22.174.179 located?
Geolocation data places 173.22.174.179 in Momence, Illinois, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 173.22.174.179 malicious or safe?
173.22.174.179 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 173.22.174.179?
The reverse DNS (PTR) record for 173.22.174.179 is 173-22-174-179.client.mchsi.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.