php2shell × Common Crawl by SwordSec

Reported PHP versions

Which PHP versions did the 6.87M potentially affected hosts report? Base: hosts whose primary reported version is below the fixed release (6,874,440 hosts).

By branch

Hosts by reported PHP branch
  1. ≤ 5.5 EOL389K · 5.7%
  2. 5.6 EOL345K · 5.0%
  3. 7.0 EOL92K · 1.3%
  4. 7.1 EOL73K · 1.1%
  5. 7.2 EOL174K · 2.5%
  6. 7.3 EOL219K · 3.2%
  7. 7.4 EOL1.27M · 18.5%
  8. 8.0 EOL300K · 4.4%
  9. 8.1 EOL634K · 9.2%
  10. 8.21.17M · 17.1%
  11. 8.31.33M · 19.4%
  12. 8.4616K · 9.0%
  13. 8.5254K · 3.7%
  14. 8.6 pre-release36 · <0.1%
Show as table
BranchStatusHostsShare
3.0End of life, no fixed release 60<0.1%
4.0End of life, no fixed release 101<0.1%
4.1End of life, no fixed release 207<0.1%
4.2End of life, no fixed release 96<0.1%
4.3End of life, no fixed release 2,735<0.1%
4.4End of life, no fixed release 11,3780.2%
5.0End of life, no fixed release 289<0.1%
5.1End of life, no fixed release 13,0510.2%
5.2End of life, no fixed release 62,3340.9%
5.3End of life, no fixed release 111,6381.6%
5.4End of life, no fixed release 130,0231.9%
5.5End of life, no fixed release 56,9060.8%
5.6End of life, no fixed release 345,3235.0%
7.0End of life, no fixed release 91,6921.3%
7.1End of life, no fixed release 72,9841.1%
7.2End of life, no fixed release 174,1762.5%
7.3End of life, no fixed release 218,8053.2%
7.4End of life, no fixed release 1,271,08218.5%
8.0End of life, no fixed release 299,9994.4%
8.1End of life, no fixed release 633,8759.2%
8.2Fixed release available 1,173,11717.1%
8.3Fixed release available 1,334,57019.4%
8.4Fixed release available 616,4429.0%
8.5Fixed release available 253,5163.7%
8.6Fixed release available 36<0.1%

Counts under 10 are shown as <10. The 8.6 rows are pre-releases from before the fix.

Most common versions

The 25 most reported versions account for most of the total. A version without a patch level (such as 7.4) means the site reported only the branch; it is counted as potentially affected but can never be called fixed.

VersionStatusHostsShare
7.4.33 End of life 1,093,65815.9%
8.3.35 Update to 8.3.36 844,42812.3%
8.2.34 Update to 8.2.35 741,93110.8%
8.1.34 End of life 544,4917.9%
8.4.26 Update to 8.4.27 404,4995.9%
8.3.33 Update to 8.3.36 281,9834.1%
5.6.40 End of life 280,2794.1%
8.2.33 Update to 8.2.35 267,4573.9%
8.0.30 End of life 247,5033.6%
8.5.11 Update to 8.5.12 167,0662.4%
7.3.33 End of life 156,2802.3%
7.2.34 End of life 124,7351.8%
7.4 End of life · branch only 80,5771.2%
5.3.29 End of life 63,9980.9%
7.1.33 End of life 57,9660.8%
7.0.33 End of life 56,4710.8%
8.3 Update to 8.3.36 · branch only 52,6520.8%
8.4 Update to 8.4.27 · branch only 51,8710.8%
5.4.45 End of life 49,4150.7%
8.4.25 Update to 8.4.27 48,9820.7%
5.4.16 End of life 46,9530.7%
5.2.17 End of life 43,2190.6%
8.2 Update to 8.2.35 · branch only 41,2940.6%
8.4.21 Update to 8.4.27 36,3720.5%
8.0 End of life · branch only 34,1830.5%

How precise are the versions?

6,471,728 hosts reported a full version such as 8.3.35; 402,707 reported only a branch such as PHP/8.3.

Conflicting reports (one page showing a fixed version, another an affected one) occurred on 0 hosts. Before the fix existed that is expected.

Distribution builds

Some version strings carry a distribution suffix. Distributions often backport security fixes without changing the upstream version, so for later crawls these hosts may already be patched. For this crawl, taken before any fix existed, they were affected.

Build hintHosts
Amazon Linux9,250
Debian81,351
RHEL / CentOS / Alma / Rocky154,466
Ondřej Surý packages (upstream version)5,346
Ubuntu48,337