PHP/ASP/JSP Source Backup File Grab for 2026-10-23

Oct 23, 2026 Exploitation

Last Updated: 00:00 UTC

Probing for backup copies of web application source files (.php.bak, .php.old, .php.txt, .php.orig, .php.swp). These files are frequently created by editors or deployment scripts and left accessible, exposing database credentials and application logic.

MITRE ATT&CK

Tactic: Credential Access (TA0006)
Technique: T1552.001 — Credentials in Files

Observed URIs

Attackers by Country

France: 10United States: 4Ireland: 3Belgium: 3Sweden: 2Poland: 2Bulgaria: 2Singapore: 1United Kingdom: 1Germany: 1Spain: 1Taiwan: 1
France1032.3%
United States412.9%
Ireland39.7%
Belgium39.7%
Sweden26.5%
Poland26.5%
Bulgaria26.5%
Singapore13.2%
United Kingdom13.2%
Germany13.2%
Spain13.2%
Taiwan13.2%

IP Address : ASN : City/Provider

  • 13.51.206.230 : AS16509 Amazon.com, Inc. : Stockholm

  • 13.79.49.60 : AS8075 Microsoft Corporation : Dublin

  • 13.89.204.75 : AS8075 Microsoft Corporation : Des Moines

  • 18.141.215.168 : AS16509 Amazon.com, Inc. : Singapore

  • 18.170.220.57 : AS16509 Amazon.com, Inc. : City of London

  • 185.177.72.12 : AS211590 Bucklog SARL : France

  • 185.177.72.144 : AS211590 Bucklog SARL : France

  • 185.177.72.210 : AS211590 Bucklog SARL : France

  • 185.177.72.23 : AS211590 Bucklog SARL : France

  • 185.177.72.30 : AS211590 Bucklog SARL : France

  • 185.177.72.51 : AS211590 Bucklog SARL : France

  • 185.177.72.55 : AS211590 Bucklog SARL : France

  • 185.177.72.56 : AS211590 Bucklog SARL : France

  • 185.177.72.60 : AS211590 Bucklog SARL : France

  • 185.177.72.9 : AS211590 Bucklog SARL : France

  • 198.167.207.203 : AS39287 Materialism s.r.l. : Sweden

  • 207.175.220.59 : AS396982 Google LLC : Brussels

  • 3.76.43.120 : AS16509 Amazon.com, Inc. : Frankfurt am Main

  • 34.173.28.158 : AS396982 Google LLC : Council Bluffs

  • 34.175.101.46 : AS396982 Google LLC : Madrid

  • 34.22.126.178 : AS396982 Google LLC : Brussels

  • 34.81.18.95 : AS396982 Google LLC : Taipei

  • 35.205.169.234 : AS396982 Google LLC : Brussels

  • 45.128.38.237 : AS9009 M247 Europe SRL : Warsaw

  • 45.128.38.243 : AS9009 M247 Europe SRL : Warsaw

  • 52.169.22.200 : AS8075 Microsoft Corporation : Dublin

  • 52.169.221.159 : AS8075 Microsoft Corporation : Dublin

  • 54.183.110.153 : AS16509 Amazon.com, Inc. : San Jose

  • 62.233.51.166 : unknown : Chicago

  • 93.123.109.214 : AS48090 Techoff Srv Limited : Bulgaria

  • 93.123.109.246 : AS48090 Techoff Srv Limited : Bulgaria

Share on: