External attack-surface research from the Fortirix platform.https://blog.fortirix.com/https://blog.fortirix.com/blog/php2shell/https://blog.fortirix.com/blog/php2shell/In scans taken almost entirely before the PHP2Shell patch, 9,912 internet-facing hostnames across 172 root domains we monitor advertised a PHP version in the affected range: 99.3% of all the PHP we see. Here is the breakdown, and what a version header can and can't tell you.Sun, 01 Nov 2026 00:00:00 GMT