Loading threats
Creates a MySQL user-defined function named cmdshell by loading the shared library xijin1.dll via CREATE FUNCTION ... SONAME, exposing system command execution functionality through the database.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 78.189.99.101 | 100% | 3,720 | 3,720 | 🇹🇷 TR | AS9121 | 2026-04-10 |
| 211.194.28.203 | 100% | 3,283 | 3,280 | 🇰🇷 KR | AS4766 | 2026-04-07 |
| 211.198.197.93 | 100% | 469 | 469 | 🇰🇷 KR | AS4766 | 2026-04-10 |
| 117.139.231.194 | 100% | 301 | 301 | 🇨🇳 CN | AS9808 | 2026-04-01 |
| 183.202.131.130 | 100% | 203 | 203 | 🇨🇳 CN | AS56042 | 2026-04-07 |
| 111.52.91.47 | 100% | 136 | 136 | 🇨🇳 CN | AS56042 | 2026-03-22 |
| 183.200.4.221 | 100% | 108 | 108 | 🇨🇳 CN | AS56042 | 2026-03-30 |
| 49.82.210.102 | 81% | 14 | 14 | 🇨🇳 CN | AS4134 | 2026-04-05 |
| 183.202.141.184 | 72% | 6 | 6 | 🇨🇳 CN | AS56042 | 2026-03-18 |