13.225.195.65

Classification: Whitelisted

13.225.195.65 is a whitelisted (trusted) IP address. Reported by 3 threat sources, last seen 2026-07-24. Network: AS16509 Amazon.com, Inc..

Current activity

  • Content Delivery Network — Belongs to a CDN with many allocated resources.
  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: COBALT STRIKE (S0154)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hosting Provider Maltiverse 2026-07-24 09:17:42 2026-07-24 09:17:42 benign hosting
Phishing OpenPhish 2022-06-07 12:40:19 2022-06-16 12:42:06 compromised
Phishing Maltiverse 2022-03-19 00:40:14 2022-05-10 12:41:30 compromised
Cobalt Strike ThreatFox Abuse.ch 2022-04-10 00:01:07 2022-04-17 00:00:57 malicious-activity S0154 Cobalt Strike

Tags

phishing cobaltstrike digitalocean-asn agentemis beacon amazon-aes

Whois information

AS name
AS16509 Amazon.com, Inc.
AS registry
arin
AS date
2019-10-01 00:00:00
AS CIDR
13.225.192.0/21
CIDR
13.200.0.0/13, 13.224.0.0/12, 13.208.0.0/12
Registrant
Amazon.com, Inc.
Address
410 Terry Ave N.
City
Montreal
State
DC
Postal code
H3A 2B7
Country
CA — Canada 🇨🇦
Contact email
[email protected], [email protected], [email protected], [email protected]
First indexed
2022-03-19 00:40:14
Last updated
2026-07-24 09:17:42