>> [01] NETWORK_FORENSICS (WHOIS)
SYSTEM_WHOIS_FAILURE: Local service restricted. INITIATING_API_DEEP_SCAN... ---------------------------------------- ORGANIZATION : Amazon.com AS_NUMBER : AS16509 Amazon.com, Inc. LOCATION : United States IP_TYPE : DATACENTER/BOT ---------------------------------------- STATUS : METADATA_EXTRACTED_VIA_REMOTE
>> [02] REVERSE_DNS_MAP
** server can't find 222.216.73.216.in-addr.arpa: NXDOMAIN
>> [03] ACTIVE_ICMP_PULSE (PING)
PING 216.73.216.222 (216.73.216.222) 56(84) bytes of data. --- 216.73.216.222 ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 2082ms
>> [04] THREAT_INTELLIGENCE_REPORT
[ANALYSIS_ID] : 64EA1A8A68
[THREAT_LVL] : CRITICAL / AUTOMATED_BOT
[PACKET_LOSS] : 2.70%
[SESSION_SIG] : 2A8964637BBBD5A1
[SOURCE_PORT] : 47866
[SERVER_TIME] : 14:19:42
> ENGINE_LOG:
- Scanned uplink via Amazon.com
- Header signature: TW96aWxsYS81LjAgQXBwbGVXZWJLaXQv...
- Threat mitigation: LOG_ONLY
- TTL expires in: 5426s