URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	98.91.254.110
Firstseen:	2026-07-09 05:34:04 UTC
Total malware sites :	10
Online malware sites :	0 (0%)
Offline Malware sites :	10 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-07-09 05:34:22	98.91.254.110	ec2-98-91-254-110.compute-1.amazonaws.com	Not listed	AS14618 AMAZON-AES	US	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-07-09 05:34:32	http://98.91.254.110/bins/kalon.arm7	Offline	elf ua-wget	abuse_ch
2026-07-09 05:34:24	http://98.91.254.110/bins/kalon.x86	Offline	elf ua-wget	abuse_ch
2026-07-09 05:34:24	http://98.91.254.110/bins/kalon.ppc	Offline	elf ua-wget	abuse_ch
2026-07-09 05:34:24	http://98.91.254.110/bins/kalon.mpsl	Offline	elf ua-wget	abuse_ch
2026-07-09 05:34:23	http://98.91.254.110/bins/kalon.mips	Offline	elf ua-wget	abuse_ch
2026-07-09 05:34:23	http://98.91.254.110/bins/kalon.m68k	Offline	elf ua-wget	abuse_ch
2026-07-09 05:34:23	http://98.91.254.110/bins/kalon.arm6	Offline	elf ua-wget	abuse_ch
2026-07-09 05:34:23	http://98.91.254.110/bins/kalon.sh4	Offline	elf ua-wget	abuse_ch
2026-07-09 05:34:23	http://98.91.254.110/bins/kalon.arm5	Offline	elf ua-wget	abuse_ch
2026-07-09 05:34:22	http://98.91.254.110/bins/kalon.arm4	Offline	elf ua-wget	abuse_ch

The table below shows recent payloads delivery by this host.