Apache Solr Admin API Probe for 2026-10-19

Oct 19, 2026 Exploitation

Last Updated: 00:00 UTC

Direct probing of /solr/admin/ management endpoints. CVE-2019-0193 (DataImportHandler RCE) requires admin API access and is frequently exploited for cryptominer deployment. The info/system and cores endpoints are the standard first requests in a Solr exploitation chain.

CVE References

CVE-2019-0193

MITRE ATT&CK

Tactic: Initial Access (TA0001)
Technique: T1190 — Exploit Public-Facing Application

Observed URIs

Attackers by Country

Germany: 176Russia: 13France: 4India: 3Hong Kong: 3Sweden: 3United States: 1China: 1Singapore: 1Panama: 1Seychelles: 1Switzerland: 1South Africa: 1United Kingdom: 1Bulgaria: 1
Germany17683.4%
Russia136.2%
France41.9%
India31.4%
Hong Kong31.4%
Sweden31.4%
United States10.5%
China10.5%
Singapore10.5%
Panama10.5%
Seychelles10.5%
Switzerland10.5%
South Africa10.5%
United Kingdom10.5%
Bulgaria10.5%

IP Address : ASN : City/Provider

Share on: