URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host janawe.bid.

Database Entry


Host:janawe.bid
Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2018-04-01 07:21:30 UTC

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-03-11 18:04:38198.54.117.197Not listedAS22612 NAMECHEAP-NET - Namecheap, Inc.- USno
2019-03-11 18:04:38198.54.117.198Not listedAS22612 NAMECHEAP-NET - Namecheap, Inc.- USno
2019-03-11 18:04:38198.54.117.199Not listedAS22612 NAMECHEAP-NET - Namecheap, Inc.- USno
2019-03-11 18:04:38198.54.117.200Not listedAS22612 NAMECHEAP-NET - Namecheap, Inc.- USno
2019-01-27 22:32:59209.99.40.223209-99-40-223.fwd.datafoundry.comNot listedAS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc- USno
2019-01-27 19:21:02209.99.40.222209-99-40-222.fwd.datafoundry.comNot listedAS3900 TEXASNET-ASN - YHC Corporation- USno
2018-07-28 07:11:0991.223.82.88hosted-by.iws.coNot listedAS199968 IWSNET- NLno
2018-04-01 07:21:53193.29.187.213Not listedAS51177 THCPROJECTS- ROno

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2019-02-27 17:15:07http://janawe.bid/FF/om2.exeOfflineexe Kutaki payload Clean@shotgunner101
2018-04-01 07:21:53http://janawe.bid/msword.exeOfflinedarkcomet Clean@James_inthe_box