Spring Boot Actuator Sensitive Endpoint Probe for 2026-09-21
Last Updated: 00:00 UTC
Spring Boot Actuator exposes management endpoints. heapdump returns a full JVM heap snapshot containing in-memory secrets. env returns all environment variables. gateway/routes is the RCE precursor for CVE-2022-22947 (Spring Cloud Gateway SPEL injection).
CVE References
MITRE ATT&CK
Tactic: Discovery (TA0007)
Technique: T1046 — Network Service Scanning
Observed URIs
Attackers by Country
| United States | 10 | 34.5% |
| Singapore | 6 | 20.7% |
| Germany | 3 | 10.3% |
| Belgium | 3 | 10.3% |
| Bulgaria | 2 | 6.9% |
| Taiwan | 2 | 6.9% |
| Hong Kong | 1 | 3.4% |
| Lithuania | 1 | 3.4% |
| United Kingdom | 1 | 3.4% |
IP Address : ASN : City/Provider
-
195.178.110.15 : AS48090 Techoff Srv Limited : Bulgaria
-
206.81.24.227 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
206.81.24.74 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
209.38.248.17 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
213.209.159.84 : AS208137 Feo Prest SRL : Taiwan
-
34.140.185.179 : AS396982 Google LLC : Brussels
-
34.143.193.168 : AS396982 Google LLC : Singapore
-
34.145.40.13 : AS396982 Google LLC : The Dalles
-
34.158.32.59 : AS396982 Google LLC : Singapore
-
34.158.43.121 : AS396982 Google LLC : Singapore
-
34.16.62.37 : AS396982 Google LLC : Council Bluffs
-
34.168.183.193 : AS396982 Google LLC : The Dalles
-
34.168.190.89 : AS396982 Google LLC : The Dalles
-
34.169.238.191 : AS396982 Google LLC : The Dalles
-
34.170.207.215 : AS396982 Google LLC : Council Bluffs
-
34.177.100.178 : AS396982 Google LLC : Singapore
-
34.177.101.247 : AS396982 Google LLC : Singapore
-
34.187.135.96 : AS396982 Google LLC : The Dalles
-
34.187.207.21 : AS396982 Google LLC : The Dalles
-
34.187.226.169 : AS396982 Google LLC : The Dalles
-
34.21.128.45 : AS396982 Google LLC : Singapore
-
34.22.126.165 : AS396982 Google LLC : Brussels
-
34.23.204.241 : AS396982 Google LLC : North Charleston
-
45.115.26.203 : AS208185 Net Gate Telecom S.R.L. : Hong Kong
-
45.138.12.52 : unknown : Lithuania
-
45.139.104.176 : AS399979 49.3 Networking LLC : Bulgaria
-
61.67.27.81 : AS18049 Taiwan Infrastructure Network Technologie : Taiwan
-
81.171.74.60 : AS34343 Eweka Internet Services B.V. : Covent Garden
-
91.148.244.131 : AS34343 Eweka Internet Services B.V. : Brussels