Report Overview
Visitedpublic
2025-12-31 11:52:51
Tags
Submit Tags
URL
console.msp360.com/
Finishing URL
console.msp360.com/AS/Login?logoff=1&ref=%2FAP%2FComputers
IP / ASN
52.6.7.137
Title
Managed Backup Service
Detections
urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
alcdn.msauth.net | 166047 | 2018-10-25 | 2019-12-10 | 2025-12-27 | 445 B | 317 kB | 13.107.246.53 |  |
console.msp360.com 2 alert(s) on this Host | unknown | 2011-10-13 | 2021-03-11 | 2025-10-07 | 30 kB | 6.9 MB | 52.6.7.137 |    |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2025-12-28 | 535 B | 1.1 MB | 142.250.178.42 | |
play.google.com | 48 | 1997-09-15 | 2013-05-30 | 2025-12-28 | 1.1 kB | 1.1 kB | 142.250.178.110 | |
signalr.services.mspbackups.com | unknown | 2014-11-14 | 2025-12-31 | 2025-12-31 | 645 B | 292 B | 54.243.221.133 |  |
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2025-12-28 | 1.1 kB | 112 kB | 142.250.178.67 | |
weblog.mspbackups.com | unknown | 2014-11-14 | 2025-12-31 | 2025-12-31 | 1.3 kB | 996 B | 3.85.65.72 | |
posthog.mon.mspbackups.com | unknown | 2014-11-14 | 2025-12-31 | 2025-12-31 | 1.1 kB | 1.1 kB | 3.225.79.66 |  |
accounts.google.com | 103 | 1997-09-15 | 2012-05-23 | 2025-12-29 | 1.7 kB | 439 kB |  142.250.150.84 |
Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Microsoft ASP.NET (Web frameworks)
ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.Bootstrap (UI frameworks)
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.Google Sign-in (Authentication)
Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Ubuntu (Operating systems)
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.Nginx:1.14.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium |  172.18.0.2 | 3.85.65.72 | ET INFO Observed MSP360 Backup Service Domain (mspbackups .com in TLS SNI) | |
| medium | 172.18.0.2 | 3.225.79.66 | ET INFO Observed MSP360 Backup Service Domain (mspbackups .com in TLS SNI) | |
| medium | 172.18.0.2 | 3.225.79.66 | ET INFO Observed MSP360 Backup Service Domain (mspbackups .com in TLS SNI) | |
| medium | 172.18.0.2 | 54.243.221.133 | ET INFO Observed MSP360 Backup Service Domain (mspbackups .com in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Nextron YARA rules | console.msp360.com/Areas/Admin/AngularClientApp/mbs-spa/dist/main.974a35e8a4a92f2a.js | malware | Detects suspicious PowerShell code that downloads from web sites |
| Nextron YARA rules | console.msp360.com/Areas/Admin/AngularClientApp/mbs-spa/dist/assets/locales/en/shared.json | malware | Detects obfuscated PowerShell hacktools |
JavaScript (11)
No JavaScripts
HTTP Transactions (43)
| URL | IP | Response | Size |
|---|