PHP Version Reconnaissance (phpinfo Page Hunt) for 2026-10-01
Last Updated: 00:00 UTC
Requests for leftover phpinfo() pages (info.php, pi.php, php-info.php, phpversion.php and similar). A phpinfo page reveals the exact PHP version, loaded extensions and settings, which tells an attacker whether exploits such as PHP2Shell or PHP-CGI argument injection will work.
MITRE ATT&CK
Tactic: Reconnaissance (TA0043)
Technique: T1592.002 — Gather Victim Host Information: Software
Observed URIs
Attackers by Country
| United States | 4 | 19.0% |
| Belgium | 4 | 19.0% |
| France | 3 | 14.3% |
| Taiwan | 2 | 9.5% |
| The Netherlands | 2 | 9.5% |
| Lithuania | 2 | 9.5% |
| Canada | 1 | 4.8% |
| South Korea | 1 | 4.8% |
| Romania | 1 | 4.8% |
| Bulgaria | 1 | 4.8% |
IP Address : ASN : City/Provider
-
136.64.175.226 : AS396982 Google LLC : Council Bluffs
-
165.227.39.235 : AS14061 DigitalOcean, LLC : Toronto
-
185.177.72.49 : AS211590 Bucklog SARL : France
-
185.177.72.66 : AS211590 Bucklog SARL : France
-
185.177.72.67 : AS211590 Bucklog SARL : France
-
20.214.109.68 : AS8075 Microsoft Corporation : Seoul
-
213.209.159.84 : AS208137 Feo Prest SRL : Taiwan
-
34.14.99.143 : AS396982 Google LLC : Brussels
-
34.140.234.80 : AS396982 Google LLC : Brussels
-
34.156.249.47 : AS396982 Google LLC : Brussels
-
34.186.103.250 : AS396982 Google LLC : Washington
-
34.38.113.44 : AS396982 Google LLC : Brussels
-
34.70.34.207 : AS396982 Google LLC : Council Bluffs
-
34.80.3.160 : AS396982 Google LLC : Taipei
-
34.91.179.195 : AS396982 Google LLC : Groningen
-
45.138.12.15 : unknown : Lithuania
-
45.138.12.28 : unknown : Lithuania
-
45.153.34.249 : AS197170 TechTies Inc. : Amsterdam
-
80.94.95.211 : AS204428 SS-Net : Romania
-
93.123.109.53 : AS48090 Techoff Srv Limited : Bulgaria