PHP Version Reconnaissance (phpinfo Page Hunt) for 2026-07-27
Last Updated: 00:00 UTC
Requests for leftover phpinfo() pages (info.php, pi.php, php-info.php, phpversion.php and similar). A phpinfo page reveals the exact PHP version, loaded extensions and settings, which tells an attacker whether exploits such as PHP2Shell or PHP-CGI argument injection will work.
MITRE ATT&CK
Tactic: Reconnaissance (TA0043)
Technique: T1592.002 — Gather Victim Host Information: Software
Observed URIs
Attackers by Country
| United States | 6 | 19.4% |
| Italy | 4 | 12.9% |
| Switzerland | 4 | 12.9% |
| Brazil | 3 | 9.7% |
| Spain | 2 | 6.5% |
| Norway | 2 | 6.5% |
| Poland | 2 | 6.5% |
| Canada | 2 | 6.5% |
| Sweden | 2 | 6.5% |
| Germany | 2 | 6.5% |
| Australia | 1 | 3.2% |
| The Netherlands | 1 | 3.2% |
IP Address : ASN : City/Provider
-
135.119.74.228 : AS8075 Microsoft Corporation : Des Moines
-
152.89.168.29 : AS212271 Lumanex Srl : Pomezia
-
158.158.76.106 : AS8075 Microsoft Corporation : Madrid
-
158.158.96.17 : AS8075 Microsoft Corporation : Madrid
-
172.202.44.182 : AS8075 Microsoft Corporation : Des Moines
-
172.202.62.14 : AS8075 Microsoft Corporation : Des Moines
-
172.213.144.209 : AS8075 Microsoft Corporation : Milan
-
172.213.208.20 : AS8075 Microsoft Corporation : Milan
-
172.213.8.106 : AS8075 Microsoft Corporation : Milan
-
191.235.98.185 : AS8075 Microsoft Corporation : Campinas
-
20.100.176.141 : AS8075 Microsoft Corporation : Oslo
-
20.195.181.10 : AS8075 Microsoft Corporation : Campinas
-
20.195.190.90 : AS8075 Microsoft Corporation : Campinas
-
20.203.200.218 : AS8075 Microsoft Corporation : Zurich
-
20.203.219.190 : AS8075 Microsoft Corporation : Zurich
-
20.203.221.142 : AS8075 Microsoft Corporation : Zurich
-
20.215.218.234 : AS8075 Microsoft Corporation : Warsaw
-
20.251.58.190 : AS8075 Microsoft Corporation : Oslo
-
20.63.10.215 : AS8075 Microsoft Corporation : Toronto
-
20.91.140.156 : AS8075 Microsoft Corporation : Sweden
-
209.99.190.115 : AS402253 SKN Subnet & Telecom Ltd : Zurich
-
34.74.224.235 : AS396982 Google LLC : North Charleston
-
34.82.98.210 : AS396982 Google LLC : The Dalles
-
4.185.41.66 : AS8075 Microsoft Corporation : Frankfurt am Main
-
4.204.201.85 : AS8075 Microsoft Corporation : Toronto
-
4.225.203.146 : AS8075 Microsoft Corporation : Sweden
-
45.134.20.133 : AS396356 Latitude.sh : Sydney
-
45.148.10.121 : AS48090 Techoff Srv Limited : Amsterdam
-
54.175.83.157 : AS14618 Amazon.com, Inc. : Ashburn
-
74.248.33.8 : AS8075 Microsoft Corporation : Warsaw