PHP Version Reconnaissance (phpinfo Page Hunt) for 2026-09-01
Last Updated: 00:00 UTC
Requests for leftover phpinfo() pages (info.php, pi.php, php-info.php, phpversion.php and similar). A phpinfo page reveals the exact PHP version, loaded extensions and settings, which tells an attacker whether exploits such as PHP2Shell or PHP-CGI argument injection will work.
MITRE ATT&CK
Tactic: Reconnaissance (TA0043)
Technique: T1592.002 — Gather Victim Host Information: Software
Observed URIs
Attackers by Country
| United States | 5 | 21.7% |
| Taiwan | 4 | 17.4% |
| Germany | 3 | 13.0% |
| United Kingdom | 2 | 8.7% |
| The Netherlands | 2 | 8.7% |
| Canada | 2 | 8.7% |
| Mexico | 1 | 4.3% |
| Ukraine | 1 | 4.3% |
| Sweden | 1 | 4.3% |
| Hong Kong | 1 | 4.3% |
| Romania | 1 | 4.3% |
IP Address : ASN : City/Provider
-
157.245.36.108 : AS14061 DigitalOcean, LLC : Slough
-
158.23.18.78 : AS8075 Microsoft Corporation : Querétaro
-
159.223.132.86 : AS14061 DigitalOcean, LLC : North Bergen
-
176.65.132.57 : AS197170 TechTies Inc. : Amsterdam
-
185.254.197.231 : AS30860 Virtual Systems LLC : Kyiv
-
20.48.160.90 : AS8075 Microsoft Corporation : Toronto
-
20.48.251.3 : AS8075 Microsoft Corporation : Toronto
-
209.38.208.202 : AS14061 DigitalOcean, LLC : Frankfurt am Main
-
213.209.159.154 : AS208137 Feo Prest SRL : Taiwan
-
213.209.159.223 : AS208137 Feo Prest SRL : Taiwan
-
34.16.206.237 : AS396982 Google LLC : Las Vegas
-
34.186.19.98 : AS396982 Google LLC : Las Vegas
-
34.20.209.38 : AS396982 Google LLC : Los Angeles
-
34.40.13.24 : AS396982 Google LLC : Frankfurt am Main
-
34.51.135.244 : AS396982 Google LLC : Stockholm
-
34.80.126.246 : AS396982 Google LLC : Taipei
-
34.81.120.87 : AS396982 Google LLC : Taipei
-
34.92.121.1 : AS396982 Google LLC : Hong Kong
-
45.148.10.125 : AS48090 Techoff Srv Limited : Amsterdam
-
8.234.28.106 : AS396982 Google LLC : Dallas
-
80.94.95.211 : AS204428 SS-Net : Romania
-
81.171.74.60 : AS34343 Eweka Internet Services B.V. : Covent Garden