A nine-year-old PHP vulnerability is one of the most actively scanned exploits on the internet today, and the reason isn't what you'd think.