Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
183.202.131.130 has a threat confidence score of 100%. This IP address from China (AS56042, China Mobile communications corporation) has been observed in 203 honeypot sessions targeting MYSQL protocols. Detected attack patterns include mysql udf exiles exe staged execution. First observed on April 6, 2026, most recently active April 7, 2026.
Sequence where a MySQL UDF is created from a shared library (multiple variants observed), followed by invocation of functions such as downloader/xpdl3 to retrieve the exiles.exe payload and write it to a Windows path. Includes prior environment probing via SELECT @@version_comment.