NewsPublished 10 Aug 2026

Scans for Solana (Surfpool?) Endpoints, (Mon, Aug 10th)

Source SANS ISC Handlers Diary

Description

Solana is a crypto platform known for speed. Developers like it to develop distributed applications or to implement crypto payments. To interact with the blockchain, APIs are provided for developers. These APIs will either "speak" JSON or gRPC. One implementation often used for development is "surfpool," which is used to test programs before deploying them to a Solana network.

Impact

There is no direct impact reported from this scanning activity. The scans are reconnaissance attempts to identify Solana API endpoints and potentially sensitive files. No exploitation or compromise has been observed or reported. If successful, such reconnaissance could be a precursor to targeted attacks, but no vulnerabilities or exploits are documented here.

Defensive guidance

Network defenders should monitor for unusual scanning activity targeting Solana API endpoints and restrict access to sensitive files such as .env configurations. Proper API gateway configurations and access controls can help prevent unauthorized access. Since this is reconnaissance, no urgent remediation is required beyond standard access restrictions and monitoring.

Summary

The observed activity involves scanning for Solana blockchain API endpoints, particularly those used by the 'surfpool' development environment. Attackers send JSON-RPC requests like 'getHealth', 'getVersion', and 'eth_chainId' to various paths to fingerprint and enumerate available API services. The scans also probe for sensitive configuration files such as .env variants. The requests are directed to port 80, suggesting the use of a proxy or gateway that maps these requests to the actual Solana API backend. No vulnerabilities or exploits are identified in this scanning activity; it is reconnaissance aimed at discovering accessible Solana API endpoints and potentially sensitive files.

References

isc.sans.edu/diary/rss/33230 (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 10 Aug 2026, 16:26 UTC

References

Community reviews