Spring Boot Actuator Sensitive Endpoint Probe for 2026-08-04

Aug 04, 2026 WebExploit

Last Updated: 00:00 UTC

Spring Boot Actuator exposes management endpoints. heapdump returns a full JVM heap snapshot containing in-memory secrets. env returns all environment variables. gateway/routes is the RCE precursor for CVE-2022-22947 (Spring Cloud Gateway SPEL injection).

CVE References

CVE-2022-22947

MITRE ATT&CK

Tactic: Discovery (TA0007)
Technique: T1046 — Network Service Scanning

Observed URIs

Attackers by Country

United States of America: 3United Kingdom of Great Britain and Northern Ireland: 2Netherlands: 1
United States of America350.0%
United Kingdom of Great Britain and Northern Ireland233.3%
Netherlands116.7%

IP Address : ASN : City/Provider

  • 165.1.66.43 : ASNone : United States of America

  • 185.177.72.56 : ASNone : Congleton

  • 185.177.72.66 : ASNone : Congleton

  • 34.125.225.206 : AS396982 google : Las Vegas

  • 34.47.246.95 : ASNone : United States of America

  • 34.91.197.153 : AS396982 google : Groningen

  • 45.45.237.21 : ASNone : unknown

  • 45.45.237.65 : ASNone : unknown

  • 45.45.237.77 : ASNone : unknown

Share on: