Spring Boot Actuator Sensitive Endpoint Probe for 2026-09-21
Last Updated: 00:00 UTC
Spring Boot Actuator exposes management endpoints. heapdump returns a full JVM heap snapshot containing in-memory secrets. env returns all environment variables. gateway/routes is the RCE precursor for CVE-2022-22947 (Spring Cloud Gateway SPEL injection).
CVE References
MITRE ATT&CK
Tactic: Discovery (TA0007)
Technique: T1046 — Network Service Scanning
Observed URIs
Attackers by Country
| United States of America | 17 | 63.0% |
| Germany | 3 | 11.1% |
| Netherlands | 2 | 7.4% |
| Belgium | 1 | 3.7% |
| Angola | 1 | 3.7% |
| Lithuania | 1 | 3.7% |
| Bulgaria | 1 | 3.7% |
| Taiwan | 1 | 3.7% |
IP Address : ASN : City/Provider
-
195.178.110.15 : unknown : unknown
-
206.81.24.227 : AS14061 digitalocean llc : Frankfurt am Main
-
206.81.24.74 : AS14061 digitalocean llc : Frankfurt am Main
-
209.38.248.17 : ASNone : United States of America
-
213.209.159.84 : AS42821 k&k kommunikationssysteme gmbh : Germany
-
34.140.185.179 : AS15169 google llc : Brussels
-
34.143.193.168 : AS396982 google : United States of America
-
34.145.40.13 : AS396982 google : The Dalles
-
34.158.32.59 : unknown : unknown
-
34.158.43.121 : AS15169 google llc : United States of America
-
34.16.62.37 : ASNone : United States of America
-
34.168.183.193 : AS396982 google : United States of America
-
34.168.190.89 : AS396982 google : United States of America
-
34.169.238.191 : AS396982 google : United States of America
-
34.170.207.215 : AS396982 google : United States of America
-
34.177.100.178 : AS15169 google llc : United States of America
-
34.177.101.247 : AS15169 google llc : United States of America
-
34.187.135.96 : AS15169 google llc : United States of America
-
34.187.207.21 : AS15169 google llc : United States of America
-
34.187.226.169 : AS15169 google llc : United States of America
-
34.21.128.45 : ASNone : United States of America
-
34.22.126.165 : ASNone : United States of America
-
34.23.204.241 : ASNone : United States of America
-
45.115.26.203 : ASNone : Luanda
-
45.138.12.52 : AS3561 centurylink communications llc : Lithuania
-
45.139.104.176 : AS49581 bil-tim bilgisayar hizmetleri : Bulgaria
-
61.67.27.81 : AS18049 taiwan infrastructure network technologie : Taiwan
-
81.171.74.60 : ASNone : Netherlands
-
91.148.244.131 : ASNone : Netherlands