13.225.195.29

Classification: Whitelisted

13.225.195.29 is a whitelisted (trusted) IP address. Reported by 5 threat sources, last seen 2026-07-24. Network: AS16509 Amazon.com, Inc..

Current activity

  • Content Delivery Network — Belongs to a CDN with many allocated resources.
  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: COBALT STRIKE (S0154)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-24 09:15:17 2026-07-24 09:15:17 benign hosting
Phishing Phishtank 2022-03-15 00:58:03 2022-06-03 05:22:15 compromised malicious-activity
Phishing OpenPhish 2022-05-19 12:41:23 2022-05-19 12:41:23 compromised
Cobalt Strike ThreatFox Abuse.ch 2022-04-09 00:01:19 2022-04-09 00:01:19 malicious-activity S0154 Cobalt Strike
Generic.Malware Hybrid-Analysis 2021-04-29 05:08:25 2021-04-29 05:08:25

Tags

phishing cobaltstrike digitalocean-asn agentemis beacon

Whois information

AS name
AS16509 Amazon.com, Inc.
AS registry
arin
AS date
2019-10-01 00:00:00
AS CIDR
13.225.192.0/21
CIDR
13.224.0.0/12, 13.200.0.0/13, 13.208.0.0/12
Registrant
Amazon.com, Inc.
Address
410 Terry Ave N.
City
Montreal
State
DC
Postal code
H3A 2B7
Country
CA — Canada 🇨🇦
Contact email
[email protected], [email protected], [email protected], [email protected]
First indexed
2021-04-29 05:08:25
Last updated
2026-07-24 09:15:17