Loading threats
Executes a SELECT * FROM <table> query to retrieve all rows and columns from a specific PostgreSQL table. In a honeypot context, this primitive represents direct data access following table discovery or creation, and is commonly observed during verification steps in automated exploitation chains, data exfiltration attempts, or post-execution checks where an attacker is confirming that staged output or payload results were successfully written and can be read back.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 154.16.112.232 | 100% | 354,752 | 86,375 | 🇺🇸 US | AS14670 | 2026-04-16 |
| 208.97.53.150 | 100% | 27,926 | 4,227 | 🇺🇸 US | AS30247 | 2026-02-24 |
| 212.113.98.30 | 100% | 15,918 | 5,172 | 🇷🇺 RU | AS206134 | 2026-04-16 |
| 178.250.186.28 | 99% | 11,144 | 2,052 | 🇷🇺 RU | AS207957 | 2026-04-13 |
| 157.230.55.143 | 100% | 8,769 | 4,808 | 🇺🇸 US | AS14061 | 2026-04-16 |
| 164.90.155.248 | 100% | 8,733 | 4,711 | 🇺🇸 US | AS14061 |
| 2026-04-16 |
| 144.217.252.80 | 100% | 8,553 | 4,703 | 🇨🇦 CA | AS16276 | 2026-04-16 |
| 157.230.250.115 | 100% | 8,456 | 4,628 | 🇺🇸 US | AS14061 | 2026-04-16 |
| 143.198.94.28 | 100% | 8,416 | 4,722 | 🇺🇸 US | AS14061 | 2026-04-16 |
| 103.81.100.222 | 100% | 8,398 | 4,648 | 🇮🇩 ID | AS58475 | 2026-04-16 |
| 209.15.110.13 | 100% | 8,378 | 4,693 | 🇹🇭 TH | AS135566 | 2026-04-16 |
| 167.172.104.27 | 100% | 8,336 | 4,670 | 🇺🇸 US | AS14061 | 2026-04-16 |
| 103.236.108.25 | 100% | 8,301 | 4,703 | 🇮🇳 IN | AS132925 | 2026-04-16 |
| 62.217.122.251 | 100% | 8,271 | 4,681 | 🇬🇷 GR | AS5408 | 2026-04-16 |
| 128.199.197.130 | 100% | 8,239 | 4,765 | 🇸🇬 SG | AS14061 | 2026-04-16 |
| 77.222.63.226 | 100% | 8,227 | 4,576 | 🇷🇺 RU | AS44112 | 2026-04-16 |
| 137.184.65.234 | 100% | 8,225 | 4,602 | 🇺🇸 US | AS14061 | 2026-04-16 |
| 45.55.174.23 | 100% | 8,216 | 4,702 | 🇺🇸 US | AS14061 | 2026-04-16 |
| 209.15.110.23 | 100% | 8,185 | 4,764 | 🇹🇭 TH | AS135566 | 2026-04-16 |
| 83.212.174.61 | 100% | 8,135 | 4,632 | 🇬🇷 GR | AS5408 | 2026-04-16 |