PHP Version Reconnaissance (phpinfo Page Hunt) for 2026-08-20
Last Updated: 00:00 UTC
Requests for leftover phpinfo() pages (info.php, pi.php, php-info.php, phpversion.php and similar). A phpinfo page reveals the exact PHP version, loaded extensions and settings, which tells an attacker whether exploits such as PHP2Shell or PHP-CGI argument injection will work.
MITRE ATT&CK
Tactic: Reconnaissance (TA0043)
Technique: T1592.002 — Gather Victim Host Information: Software
Observed URIs
Attackers by Country
| United States | 11 | 33.3% |
| Mexico | 4 | 12.1% |
| Norway | 2 | 6.1% |
| Taiwan | 2 | 6.1% |
| Poland | 2 | 6.1% |
| South Africa | 1 | 3.0% |
| Bulgaria | 1 | 3.0% |
| Switzerland | 1 | 3.0% |
| India | 1 | 3.0% |
| Brazil | 1 | 3.0% |
| Hong Kong | 1 | 3.0% |
| Singapore | 1 | 3.0% |
| Germany | 1 | 3.0% |
| Sweden | 1 | 3.0% |
| Italy | 1 | 3.0% |
| Canada | 1 | 3.0% |
| Romania | 1 | 3.0% |
IP Address : ASN : City/Provider
-
104.209.144.33 : AS8075 Microsoft Corporation : Boydton
-
158.23.18.197 : AS8075 Microsoft Corporation : Querétaro
-
168.62.48.100 : AS8075 Microsoft Corporation : Dulles
-
172.182.200.96 : AS8075 Microsoft Corporation : Phoenix
-
172.182.217.32 : AS8075 Microsoft Corporation : Phoenix
-
185.132.186.36 : AS206092 F.n.s. Holdings Limited : Johannesburg
-
195.178.110.31 : AS48090 Techoff Srv Limited : Bulgaria
-
20.100.185.105 : AS8075 Microsoft Corporation : Oslo
-
20.106.102.5 : AS8075 Microsoft Corporation : Phoenix
-
20.203.183.135 : AS8075 Microsoft Corporation : Zurich
-
20.219.2.203 : AS8075 Microsoft Corporation : Pune
-
20.226.112.14 : AS8075 Microsoft Corporation : Campinas
-
20.228.229.148 : AS8075 Microsoft Corporation : Dulles
-
20.24.67.246 : AS8075 Microsoft Corporation : Hong Kong
-
20.251.48.93 : AS8075 Microsoft Corporation : Oslo
-
20.40.208.6 : AS8075 Microsoft Corporation : Des Moines
-
20.65.105.233 : AS8075 Microsoft Corporation : Boydton
-
20.97.182.130 : AS8075 Microsoft Corporation : Boydton
-
213.209.159.223 : AS208137 Feo Prest SRL : Taiwan
-
34.23.47.120 : AS396982 Google LLC : North Charleston
-
35.237.76.201 : AS396982 Google LLC : North Charleston
-
35.247.188.1 : AS396982 Google LLC : Singapore
-
4.184.238.176 : AS8075 Microsoft Corporation : Frankfurt am Main
-
4.223.164.152 : AS8075 Microsoft Corporation : Sweden
-
4.232.94.69 : AS8075 Microsoft Corporation : Milan
-
52.139.47.57 : AS8075 Microsoft Corporation : Toronto
-
60.249.31.153 : AS3462 Data Communication Business Group : Taichung
-
68.155.146.130 : AS8075 Microsoft Corporation : Querétaro
-
68.155.154.146 : AS8075 Microsoft Corporation : Querétaro
-
68.155.154.236 : AS8075 Microsoft Corporation : Querétaro
-
74.248.130.103 : AS8075 Microsoft Corporation : Warsaw
-
74.248.133.44 : AS8075 Microsoft Corporation : Warsaw
-
80.94.95.211 : AS204428 SS-Net : Romania