Spring Boot Actuator Sensitive Endpoint Probe for 2026-10-08
Last Updated: 00:00 UTC
Spring Boot Actuator exposes management endpoints. heapdump returns a full JVM heap snapshot containing in-memory secrets. env returns all environment variables. gateway/routes is the RCE precursor for CVE-2022-22947 (Spring Cloud Gateway SPEL injection).
CVE References
MITRE ATT&CK
Tactic: Discovery (TA0007)
Technique: T1046 — Network Service Scanning
Observed URIs
Attackers by Country
| Canada | 6 | 40.0% |
| The Netherlands | 5 | 33.3% |
| Taiwan | 2 | 13.3% |
| India | 1 | 6.7% |
| United States | 1 | 6.7% |
IP Address : ASN : City/Provider
-
107.167.181.44 : AS396982 Google LLC : Taipei
-
34.158.152.37 : AS396982 Google LLC : Groningen
-
34.93.40.82 : AS396982 Google LLC : Mumbai
-
35.203.188.215 : AS396982 Google LLC : The Dalles
-
35.203.25.153 : AS396982 Google LLC : Montreal
-
35.203.57.62 : AS396982 Google LLC : Montreal
-
35.203.78.248 : AS396982 Google LLC : Montreal
-
35.203.83.240 : AS396982 Google LLC : Montreal
-
35.203.83.31 : AS396982 Google LLC : Montreal
-
35.203.95.196 : AS396982 Google LLC : Montreal
-
35.204.107.4 : AS396982 Google LLC : Groningen
-
35.204.126.29 : AS396982 Google LLC : Groningen
-
35.204.146.230 : AS396982 Google LLC : Groningen
-
35.204.188.113 : AS396982 Google LLC : Groningen
-
35.221.231.111 : AS396982 Google LLC : Taipei