Good evening,
I just noticed that a phpinfo.php file was placed in the folder of one of my domains today at 15:58.
I was on the phone with support at that moment about a 520 error, and they never told me they added this file… I didn’t think support would do something like that without warning.
It wasn’t me who put it there, and the FTP logs show no trace, but the file is dated today 09/21/2026 15:58:46.
It shocks me a bit, doesn’t it?
Hello @EmmanuelM1
It could be that Support created it as part of some diagnosis, but it could also be that a script or WordPress plugin (if that’s what you use) generated it at that moment.
Another, less likely but not impossible, option is that an attacker might have uploaded that file to probe the terrain. If you have a security breach, this file could be a warning sign.
Kind regards,
Sergio Turpín
No, it’s OVH support for a diagnosis—probably yes, it was when I was on the phone with him.
But anyway he didn’t say anything to me, and he didn’t delete the file afterwards.