PHP Version Reconnaissance (phpinfo Page Hunt) for 2026-08-01
Last Updated: 00:00 UTC
Requests for leftover phpinfo() pages (info.php, pi.php, php-info.php, phpversion.php and similar). A phpinfo page reveals the exact PHP version, loaded extensions and settings, which tells an attacker whether exploits such as PHP2Shell or PHP-CGI argument injection will work.
MITRE ATT&CK
Tactic: Reconnaissance (TA0043)
Technique: T1592.002 — Gather Victim Host Information: Software
Observed URIs
Attackers by Country
| United States | 3 | 15.0% |
| Italy | 3 | 15.0% |
| Canada | 3 | 15.0% |
| Sweden | 3 | 15.0% |
| Spain | 2 | 10.0% |
| Switzerland | 2 | 10.0% |
| Singapore | 1 | 5.0% |
| Brazil | 1 | 5.0% |
| Poland | 1 | 5.0% |
| The Netherlands | 1 | 5.0% |
IP Address : ASN : City/Provider
-
135.119.63.61 : AS8075 Microsoft Corporation : Des Moines
-
158.158.54.131 : AS8075 Microsoft Corporation : Madrid
-
167.172.81.143 : AS14061 DigitalOcean, LLC : Singapore
-
172.202.44.182 : AS8075 Microsoft Corporation : Des Moines
-
172.202.95.21 : AS8075 Microsoft Corporation : Des Moines
-
172.213.2.180 : AS8075 Microsoft Corporation : Milan
-
172.213.216.126 : AS8075 Microsoft Corporation : Milan
-
172.213.232.128 : AS8075 Microsoft Corporation : Milan
-
20.104.16.169 : AS8075 Microsoft Corporation : Toronto
-
20.199.181.219 : AS8075 Microsoft Corporation : Zurich
-
20.203.221.142 : AS8075 Microsoft Corporation : Zurich
-
20.220.203.117 : AS8075 Microsoft Corporation : Toronto
-
20.226.5.174 : AS8075 Microsoft Corporation : Campinas
-
20.240.137.17 : AS8075 Microsoft Corporation : Sweden
-
20.63.98.115 : AS8075 Microsoft Corporation : Toronto
-
20.91.199.21 : AS8075 Microsoft Corporation : Sweden
-
4.223.65.51 : AS8075 Microsoft Corporation : Sweden
-
68.221.186.136 : AS8075 Microsoft Corporation : Madrid
-
74.248.24.145 : AS8075 Microsoft Corporation : Warsaw
-
85.11.167.194 : AS197170 TechTies Inc. : Amsterdam