13.225.195.21
Classification: Whitelisted
13.225.195.21 is a whitelisted (trusted) IP address. Reported by 4 threat sources, last seen 2026-07-24. Network: AS16509 Amazon.com, Inc..
Current activity
- Content Delivery Network — Belongs to a CDN with many allocated resources.
- Hosting provider — Shared hosting infrastructure.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hosting Provider | Maltiverse | 2026-07-24 09:17:33 | 2026-07-24 09:17:33 | benign hosting | |
| Phishing | Phishtank | 2022-04-20 00:22:49 | 2022-06-15 11:20:06 | compromised malicious-activity | |
| Phishing | OpenPhish | 2022-05-17 12:40:03 | 2022-05-17 12:40:03 | compromised | |
| Cobalt Strike | ThreatFox Abuse.ch | 2022-04-17 00:00:57 | 2022-04-17 00:00:57 | malicious-activity | S0154 Cobalt Strike |
Tags
phishing cobaltstrike digitalocean-asn agentemis beaconWhois information
- AS name
- AS16509 Amazon.com, Inc.
- AS registry
- arin
- AS date
- 2019-10-01 00:00:00
- AS CIDR
- 13.225.192.0/21
- CIDR
- 13.200.0.0/13, 13.224.0.0/12, 13.208.0.0/12
- Registrant
- Amazon.com, Inc.
- Address
- 410 Terry Ave N.
- City
- Montreal
- State
- DC
- Postal code
- H3A 2B7
- Country
- CA — Canada 🇨🇦
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2022-04-17 00:00:57
- Last updated
- 2026-07-24 09:17:33