Spring Boot Actuator Sensitive Endpoint Probe for 2026-10-23

Oct 23, 2026 Exploitation

Last Updated: 00:00 UTC

Spring Boot Actuator exposes management endpoints. heapdump returns a full JVM heap snapshot containing in-memory secrets. env returns all environment variables. gateway/routes is the RCE precursor for CVE-2022-22947 (Spring Cloud Gateway SPEL injection).

CVE References

CVE-2022-22947

MITRE ATT&CK

Tactic: Discovery (TA0007)
Technique: T1046 — Network Service Scanning

Observed URIs

Attackers by Country

Germany: 19United States: 11The Netherlands: 7United Kingdom: 6Singapore: 4Canada: 4India: 3Bulgaria: 3Ukraine: 2France: 1Belgium: 1Malaysia: 1
Germany1930.6%
United States1117.7%
The Netherlands711.3%
United Kingdom69.7%
Singapore46.5%
Canada46.5%
India34.8%
Bulgaria34.8%
Ukraine23.2%
France11.6%
Belgium11.6%
Malaysia11.6%

IP Address : ASN : City/Provider

  • 128.199.182.152 : AS14061 DigitalOcean, LLC : Singapore

  • 134.209.25.199 : AS14061 DigitalOcean, LLC : Slough

  • 138.197.191.87 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 138.68.144.227 : AS14061 DigitalOcean, LLC : Slough

  • 138.68.86.32 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 139.59.132.8 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 139.59.136.184 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 139.59.143.102 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 139.59.231.238 : AS14061 DigitalOcean, LLC : Singapore

  • 142.93.129.190 : AS14061 DigitalOcean, LLC : Amsterdam

  • 142.93.143.8 : AS14061 DigitalOcean, LLC : Amsterdam

  • 146.190.103.103 : AS14061 DigitalOcean, LLC : Singapore

  • 146.190.242.161 : AS14061 DigitalOcean, LLC : Toronto

  • 146.190.63.248 : AS14061 DigitalOcean, LLC : Santa Clara

  • 146.190.63.48 : AS14061 DigitalOcean, LLC : Santa Clara

  • 157.230.19.140 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 157.245.105.107 : AS14061 DigitalOcean, LLC : Bengaluru

  • 159.223.132.86 : AS14061 DigitalOcean, LLC : North Bergen

  • 159.65.144.72 : AS14061 DigitalOcean, LLC : Bengaluru

  • 159.89.12.166 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 159.89.127.165 : AS14061 DigitalOcean, LLC : Toronto

  • 159.89.174.87 : AS14061 DigitalOcean, LLC : Bengaluru

  • 164.90.208.56 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 164.92.244.132 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 165.22.235.3 : AS14061 DigitalOcean, LLC : Toronto

  • 165.227.173.41 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 165.227.39.235 : AS14061 DigitalOcean, LLC : Toronto

  • 165.227.84.14 : AS14061 DigitalOcean, LLC : North Bergen

  • 167.172.232.142 : AS14061 DigitalOcean, LLC : Clifton

  • 167.71.175.236 : AS14061 DigitalOcean, LLC : Clifton

  • 167.71.81.114 : AS14061 DigitalOcean, LLC : Clifton

  • 167.99.210.137 : AS14061 DigitalOcean, LLC : Amsterdam

  • 172.235.183.127 : AS63949 Akamai Connected Cloud : Amsterdam

  • 178.128.207.138 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 185.177.72.144 : AS211590 Bucklog SARL : France

  • 185.254.197.90 : AS30860 Virtual Systems LLC : Kyiv

  • 195.178.110.242 : AS48090 Techoff Srv Limited : Bulgaria

  • 206.189.19.19 : AS14061 DigitalOcean, LLC : Slough

  • 206.189.2.13 : AS14061 DigitalOcean, LLC : Amsterdam

  • 206.189.225.181 : AS14061 DigitalOcean, LLC : North Bergen

  • 206.81.12.187 : AS14061 DigitalOcean, LLC : North Bergen

  • 206.81.24.227 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 206.81.24.74 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 207.154.197.113 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 207.154.212.47 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 209.38.208.202 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 209.38.248.17 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 209.97.180.8 : AS14061 DigitalOcean, LLC : Slough

  • 34.173.28.158 : AS396982 Google LLC : Council Bluffs

  • 45.148.10.21 : AS48090 Techoff Srv Limited : Amsterdam

  • 45.45.237.39 : AS400529 Infraly, LLC : Chicago

  • 46.101.1.225 : AS14061 DigitalOcean, LLC : Slough

  • 64.225.75.246 : AS14061 DigitalOcean, LLC : Amsterdam

  • 64.226.65.160 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 64.226.78.121 : AS14061 DigitalOcean, LLC : Frankfurt am Main

  • 64.227.32.66 : AS14061 DigitalOcean, LLC : Slough

  • 68.183.180.73 : AS14061 DigitalOcean, LLC : Singapore

  • 91.148.244.131 : AS34343 Eweka Internet Services B.V. : Brussels

  • 91.234.6.21 : AS30860 Virtual Systems LLC : Kyiv

  • 93.123.109.214 : AS48090 Techoff Srv Limited : Bulgaria

  • 93.123.109.246 : AS48090 Techoff Srv Limited : Bulgaria

  • 98.98.47.144 : AS21859 Zenlayer Inc : Kuala Lumpur

Share on: