>> [01] NETWORK_FORENSICS (WHOIS)
SYSTEM_WHOIS_FAILURE: Local service restricted. INITIATING_API_DEEP_SCAN... ---------------------------------------- ORGANIZATION : Amazon.com AS_NUMBER : AS16509 Amazon.com, Inc. LOCATION : United States IP_TYPE : DATACENTER/BOT ---------------------------------------- STATUS : METADATA_EXTRACTED_VIA_REMOTE
>> [02] REVERSE_DNS_MAP
** server can't find 140.216.73.216.in-addr.arpa: NXDOMAIN
>> [03] ACTIVE_ICMP_PULSE (PING)
PING 216.73.216.140 (216.73.216.140) 56(84) bytes of data. --- 216.73.216.140 ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 2079ms
>> [04] THREAT_INTELLIGENCE_REPORT
[ANALYSIS_ID] : CAB1E66FE7
[THREAT_LVL] : CRITICAL / AUTOMATED_BOT
[PACKET_LOSS] : 0.23%
[SESSION_SIG] : BD3606C1FF6493C0
[SOURCE_PORT] : 55588
[SERVER_TIME] : 12:04:39
> ENGINE_LOG:
- Scanned uplink via Amazon.com
- Header signature: TW96aWxsYS81LjAgQXBwbGVXZWJLaXQv...
- Threat mitigation: LOG_ONLY
- TTL expires in: 6125s