hosting

IONOS: security status

patchedofficial notice · 2026-10-22

Summary

Official status incident (Oct 21 11:31 to Oct 22 06:10, US Eastern), resolved on Oct 22: 'IONOS already rolled out the official updates across all platforms it operates itself' and 'Customers do not need to take any action.' PHP products covered include Web Hosting, Managed WordPress and MyWebsite 8. The help article adds that versions no longer supported upstream also received the needed security updates, so customers can keep their current version, and that PHP Extended Support users are protected. No per-version times are given, nor whether displayed version numbers change. VPS and dedicated customers must update PHP themselves.

Customer action:

No action where IONOS manages PHP (you pick the version in your IONOS account). VPS and dedicated customers must update PHP now, restart all PHP services, and check logs and unknown .php files. Plan a move off PHP 8.1 and older soon. Do not follow links in emails claiming to be from IONOS about this.

Source: https://www.ionos-status.com/incidents/3fkdbfd8zldr
Verified: 2026-10-26

IONOS also sells VPS, cloud and dedicated servers, where the customer runs PHP; an address in AS8560 does not say which product it is. Domains registered at IONOS use its name servers (ns1ZZZ.ui-dns.*, see ionos-dns) wherever the site is hosted.

How this tool recognises the provider

AS numbers: AS8560
Text in the AS name: IONOS-AS

Report a correction (GitHub)