PHP Version Reconnaissance (phpinfo Page Hunt) for 2026-09-16

Sep 16, 2026 Exploitation

Last Updated: 00:00 UTC

Requests for leftover phpinfo() pages (info.php, pi.php, php-info.php, phpversion.php and similar). A phpinfo page reveals the exact PHP version, loaded extensions and settings, which tells an attacker whether exploits such as PHP2Shell or PHP-CGI argument injection will work.

MITRE ATT&CK

Tactic: Reconnaissance (TA0043)
Technique: T1592.002 — Gather Victim Host Information: Software

Observed URIs

Attackers by Country

United States	8	32.0%
Taiwan	4	16.0%
Germany	2	8.0%
Belgium	2	8.0%
Singapore	1	4.0%
Bulgaria	1	4.0%
France	1	4.0%
Chile	1	4.0%
South Africa	1	4.0%
Australia	1	4.0%
Lithuania	1	4.0%
The Netherlands	1	4.0%
Romania	1	4.0%

IP Address : ASN : City/Provider

136.112.236.161 : AS396982 Google LLC : Council Bluffs
139.59.231.238 : AS14061 DigitalOcean, LLC : Singapore
195.178.110.15 : AS48090 Techoff Srv Limited : Bulgaria
20.106.228.98 : AS8075 Microsoft Corporation : Dulles
213.209.159.175 : AS208137 Feo Prest SRL : Taiwan
34.106.48.170 : AS396982 Google LLC : Salt Lake City
34.125.33.240 : AS396982 Google LLC : Las Vegas
34.155.82.211 : AS396982 Google LLC : Paris
34.16.206.146 : AS396982 Google LLC : Las Vegas
34.176.32.36 : AS396982 Google LLC : Santiago
34.185.70.247 : AS396982 Google LLC : Salt Lake City
34.35.183.152 : AS396982 Google LLC : Johannesburg
34.40.175.253 : AS396982 Google LLC : Sydney
34.40.39.86 : AS396982 Google LLC : Frankfurt am Main
34.52.146.37 : AS396982 Google LLC : Brussels
34.79.176.214 : AS396982 Google LLC : Brussels
34.80.156.35 : AS396982 Google LLC : Taipei
34.80.219.19 : AS396982 Google LLC : Taipei
35.221.237.4 : AS396982 Google LLC : Taipei
35.224.153.8 : AS396982 Google LLC : Council Bluffs
45.138.12.16 : unknown : Lithuania
45.148.10.21 : AS48090 Techoff Srv Limited : Amsterdam
8.234.20.57 : AS396982 Google LLC : Dallas
80.94.95.211 : AS204428 SS-Net : Romania
81.171.72.93 : AS34343 Eweka Internet Services B.V. : Berlin

Share on: