>> [01] NETWORK_FORENSICS (WHOIS)
SYSTEM_WHOIS_FAILURE: Local service restricted. INITIATING_API_DEEP_SCAN... ---------------------------------------- ORGANIZATION : Amazon.com AS_NUMBER : AS16509 Amazon.com, Inc. LOCATION : United States IP_TYPE : DATACENTER/BOT ---------------------------------------- STATUS : METADATA_EXTRACTED_VIA_REMOTE
>> [02] REVERSE_DNS_MAP
** server can't find 189.216.73.216.in-addr.arpa: NXDOMAIN
>> [03] ACTIVE_ICMP_PULSE (PING)
PING 216.73.216.189 (216.73.216.189) 56(84) bytes of data. --- 216.73.216.189 ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 2082ms
>> [04] THREAT_INTELLIGENCE_REPORT
[ANALYSIS_ID] : A6B7666D51
[THREAT_LVL] : CRITICAL / AUTOMATED_BOT
[PACKET_LOSS] : 0.97%
[SESSION_SIG] : B4275CC644C767CB
[SOURCE_PORT] : 48400
[SERVER_TIME] : 12:54:17
> ENGINE_LOG:
- Scanned uplink via Amazon.com
- Header signature: TW96aWxsYS81LjAgQXBwbGVXZWJLaXQv...
- Threat mitigation: LOG_ONLY
- TTL expires in: 3935s