13.225.195.107

Classification: Whitelisted

13.225.195.107 is a whitelisted (trusted) IP address. Reported by 5 threat sources, last seen 2026-07-24. Network: AS16509 Amazon.com, Inc..

Current activity

  • Content Delivery Network — Belongs to a CDN with many allocated resources.
  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: COBALT STRIKE (S0154)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-24 09:17:17 2026-07-24 09:17:17 benign hosting
Phishing OpenPhish 2022-06-19 00:41:59 2022-06-19 00:41:59 compromised
Phishing Phishtank 2022-05-17 00:20:35 2022-05-17 00:20:35 compromised malicious-activity
Malware Download URLhaus Abuse.ch 2022-05-11 17:15:46 2022-05-11 17:15:46 malicious-activity
Cobalt Strike ThreatFox Abuse.ch 2022-04-10 00:01:07 2022-04-10 00:01:07 malicious-activity S0154 Cobalt Strike

Tags

phishing malware_download amazon-aes cobaltstrike agentemis beacon

Whois information

AS name
AS16509 Amazon.com, Inc.
AS registry
arin
AS date
2019-10-01 00:00:00
AS CIDR
13.225.192.0/21
CIDR
13.208.0.0/12, 13.200.0.0/13, 13.224.0.0/12
Registrant
Amazon.com, Inc.
Address
410 Terry Ave N.
City
Montreal
State
DC
Postal code
H3A 2B7
Country
CA — Canada 🇨🇦
Contact email
[email protected], [email protected], [email protected], [email protected]
First indexed
2022-04-10 00:01:07
Last updated
2026-07-24 09:17:17