PHP Version Reconnaissance (phpinfo Page Hunt) for 2026-09-11

Sep 11, 2026 Exploitation

Last Updated: 00:00 UTC

Requests for leftover phpinfo() pages (info.php, pi.php, php-info.php, phpversion.php and similar). A phpinfo page reveals the exact PHP version, loaded extensions and settings, which tells an attacker whether exploits such as PHP2Shell or PHP-CGI argument injection will work.

MITRE ATT&CK

Tactic: Reconnaissance (TA0043)
Technique: T1592.002 — Gather Victim Host Information: Software

Observed URIs

Attackers by Country

United States	6	25.0%
Switzerland	3	12.5%
Taiwan	2	8.3%
Australia	2	8.3%
The Netherlands	2	8.3%
France	1	4.2%
Bulgaria	1	4.2%
United Kingdom	1	4.2%
Hong Kong	1	4.2%
South Africa	1	4.2%
Finland	1	4.2%
India	1	4.2%
South Korea	1	4.2%
Romania	1	4.2%

IP Address : ASN : City/Provider

100.31.109.160 : AS14618 Amazon.com, Inc. : Ashburn
129.213.151.234 : AS31898 Oracle Corporation : Ashburn
185.177.72.49 : AS211590 Bucklog SARL : France
185.218.86.2 : unknown : Bulgaria
185.99.255.196 : AS27176 DataWagon LLC : London
20.24.86.237 : AS8075 Microsoft Corporation : Hong Kong
213.209.159.175 : AS208137 Feo Prest SRL : Taiwan
34.16.133.31 : AS396982 Google LLC : Las Vegas
34.185.75.117 : AS396982 Google LLC : Salt Lake City
34.24.220.34 : AS396982 Google LLC : North Charleston
34.35.29.66 : AS396982 Google LLC : Johannesburg
34.40.187.90 : AS396982 Google LLC : Sydney
34.40.220.43 : AS396982 Google LLC : Sydney
34.65.22.192 : AS396982 Google LLC : Zurich
34.65.31.150 : AS396982 Google LLC : Zurich
34.65.50.17 : AS396982 Google LLC : Zurich
34.81.164.113 : AS396982 Google LLC : Taipei
34.88.127.120 : AS396982 Google LLC : Lappeenranta
4.224.45.129 : AS8075 Microsoft Corporation : Pune
45.148.10.21 : AS48090 Techoff Srv Limited : Amsterdam
45.153.34.217 : AS197170 TechTies Inc. : Amsterdam
52.141.45.117 : AS8075 Microsoft Corporation : Seoul
8.234.240.90 : AS396982 Google LLC : Washington
80.94.95.211 : AS204428 SS-Net : Romania

Share on: