All Detections

SSRF Attack - Internal RFC-1918 or Cloud Metadata Address in HTTP Request

avatar
Ankit Mehta@Secvyn
updated Jun 30, 2026002

Detects HTTP requests attempting to access sensitive internal IP addresses (RFC-1918) or cloud metadata services (e.g., 169.254.169.254) which are common indicators of Server-Side Request Forgery (SSRF) exploitation attempts.

Suricata