PHP Version Reconnaissance (phpinfo Page Hunt) for 2026-07-28
Last Updated: 00:00 UTC
Requests for leftover phpinfo() pages (info.php, pi.php, php-info.php, phpversion.php and similar). A phpinfo page reveals the exact PHP version, loaded extensions and settings, which tells an attacker whether exploits such as PHP2Shell or PHP-CGI argument injection will work.
MITRE ATT&CK
Tactic: Reconnaissance (TA0043)
Technique: T1592.002 — Gather Victim Host Information: Software
Observed URIs
Attackers by Country
| United States | 5 | 19.2% |
| Canada | 5 | 19.2% |
| Brazil | 4 | 15.4% |
| Spain | 2 | 7.7% |
| Italy | 2 | 7.7% |
| Sweden | 2 | 7.7% |
| Norway | 2 | 7.7% |
| France | 1 | 3.8% |
| Iran | 1 | 3.8% |
| Germany | 1 | 3.8% |
| Belgium | 1 | 3.8% |
IP Address : ASN : City/Provider
-
135.119.63.61 : AS8075 Microsoft Corporation : Des Moines
-
135.119.74.228 : AS8075 Microsoft Corporation : Des Moines
-
158.158.96.17 : AS8075 Microsoft Corporation : Madrid
-
168.62.197.22 : AS8075 Microsoft Corporation : San Jose
-
172.213.208.20 : AS8075 Microsoft Corporation : Milan
-
172.213.244.85 : AS8075 Microsoft Corporation : Milan
-
185.177.72.5 : AS211590 Bucklog SARL : France
-
185.93.89.167 : AS213790 Limited Network LTD : Iran
-
191.232.199.39 : AS8075 Microsoft Corporation : Campinas
-
191.235.102.133 : AS8075 Microsoft Corporation : Campinas
-
20.104.18.253 : AS8075 Microsoft Corporation : Toronto
-
20.151.107.236 : AS8075 Microsoft Corporation : Toronto
-
20.151.221.150 : AS8075 Microsoft Corporation : Toronto
-
20.151.221.234 : AS8075 Microsoft Corporation : Toronto
-
20.195.181.10 : AS8075 Microsoft Corporation : Campinas
-
20.226.5.174 : AS8075 Microsoft Corporation : Campinas
-
20.63.10.215 : AS8075 Microsoft Corporation : Toronto
-
20.9.63.139 : AS8075 Microsoft Corporation : Des Moines
-
20.91.139.111 : AS8075 Microsoft Corporation : Sweden
-
38.246.114.117 : AS26042 FiberState, LLC : Draper
-
4.184.121.217 : AS8075 Microsoft Corporation : Frankfurt am Main
-
4.225.203.146 : AS8075 Microsoft Corporation : Sweden
-
51.120.70.186 : AS8075 Microsoft Corporation : Oslo
-
51.120.83.160 : AS8075 Microsoft Corporation : Oslo
-
68.221.69.72 : AS8075 Microsoft Corporation : Madrid
-
91.148.244.131 : AS34343 Eweka Internet Services B.V. : Brussels