Spring Boot Actuator Sensitive Endpoint Probe for 2026-08-27
Last Updated: 00:00 UTC
Spring Boot Actuator exposes management endpoints. heapdump returns a full JVM heap snapshot containing in-memory secrets. env returns all environment variables. gateway/routes is the RCE precursor for CVE-2022-22947 (Spring Cloud Gateway SPEL injection).
CVE References
MITRE ATT&CK
Tactic: Discovery (TA0007)
Technique: T1046 — Network Service Scanning
Observed URIs
Attackers by Country
| United States of America | 11 | 91.7% |
| Australia | 1 | 8.3% |
IP Address : ASN : City/Provider
-
104.154.185.90 : AS396982 google : Council Bluffs
-
136.114.140.138 : AS15169 google llc : United States of America
-
136.116.172.48 : AS15169 google llc : United States of America
-
154.58.229.20 : AS174 cogent communications : United States of America
-
34.125.90.143 : AS396982 google : Las Vegas
-
34.135.103.109 : AS15169 google llc : Council Bluffs
-
34.23.27.16 : ASNone : United States of America
-
34.74.115.178 : AS396982 google : North Charleston
-
34.75.202.93 : AS396982 google : North Charleston
-
35.226.225.181 : AS15169 google llc : Council Bluffs
-
35.255.68.195 : AS3549 level 3 parent llc : United States of America
-
95.111.217.89 : AS202053 upcloud ltd : Sydney