🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://193.233.20.122/cegg_x86 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3950993
URL: http://193.233.20.122/cegg_x86
URL Status:Offline
Host: 193.233.20.122
Date added:2026-10-16 19:21:07 UTC
Last online:2026-10-18 09:XX:XX UTC
Threat:Malware download Malware download
Reporter: YaRi78
Abuse complaint sent (?): Yes (2026-10-17 02:24:27 UTC to abuse{at}kvmka[dot]ru)
Takedown time:1 day, 6 hours, 54 minutes Poor (down since 2026-10-18 09:19:03 UTC)
Tags:cowrie gafgyt link honeypot

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-10-18n/aelf f0dd74b1e623c4b019fd10ccab535a632277aa9b62a7ff4d84631b2df6f4d62an/aGafgyt
2026-10-17n/aelf e45d4154c9a1f5311ec5882464e7a8b8d0ab3cc2960d305a8a84db86ef68af85n/aGafgyt
2026-10-17n/aelf 827fb209cb3ce670051bd4914c7474db7331b6f5e35f37876a5aca0f7edaab85n/a
2026-10-17n/aelf 8b317eb6028539f04ef394a44f5e201703020fcd22f9067c5bed8be1ec0ae204n/a
2026-10-17n/aelf 904a5e0cb0c2e199b308a7a2f0a7e2c58ac480cc4e4aecb52e3288143f9a4855n/a
2026-10-17n/aelf 5c390a72ec6f1a3e7978542c2146f9c0d785cc217f132a876181b9c7f3c8bdf9n/a