Various IP addresses call various domains looking for various paths that might lead to PHP My Admin/scripts/setup.php
One of those IP addresses is 220.127.116.11 which I just now found out I could navigate to shows a page in Chinese titled
Rinchen technology overseas VPS - PHP probe
A very effective translation can be achieved using Google Chrome. It will translate the live results as they come in. It is also available via domain name 8242.cn. However, although it is Chinese, it seems to be hosted within the US, and around the world. (assuming it is all the same thing)
Generally, it seems to list status information, PHP build, processor, ram, etc. linux version, uptime, clock, information on the features enabled for PHP, database. It also provides
MySQL database connection detection
which asks for address, port, user, pass and has a "MySQL Test" button
Enter the function you want to test:
Please enter your email address to test:
I find this program very annoying since it floods our logs with high amounts of traffic that I consider it an attack. Actually, we don't run PHP, so I am not much concerned, but we have blocked several of these IPs anyway, especially the ones that are overseas and hardly likely to serve legitimate users.
Does anybody know who runs these systems? Somebody must be putting considerable effort into getting a list of all instances of PHP MyAdmin setup.php. I was hoping there would be more information available from you guys. This is very annoying that the program keeps popping up on new IPs. All I know so far is it is Chinese....