LBR - maniaplay

quack95 · July 20, 2023 at 9:07 PM

This obsession with malicious exploitation man..

1. Username, UUID, IP(s), and short ban reason for each offender. Format as follows:

YAML

Code

maniaplay:  
  uuid: 'f5ed01cd-3651-48af-99fc-d21a034583c7'  
  ips:  
    - 191.17.46.5
  reason: 'Grabbing player IPs using an exploit'

2. What did they do?

They used a Figura Script that IP logs players, each time /eseen-ing it verifying it's their IP. They have always never talked about it and do not ever provide any detail on what they're doing. Obsession with malicious exploitation? Anyone?

3. What indefinitely bannable offense does this fall under according to the guidance for sanctions?

Rule 1, Rule 3, Rule 6, and i think it's breaking a law? not sure

4. Add logs and/or screenshots of the occurrence here, and tag any witnessing staff. Evidence of previous offenses that are not the direct cause of this request can also be added here.

97 (cant tag you for some reason), Alco_Rs11 videogamesm12 plus You! and me

5. Are they known under any other names or IPs, and if so, are they currently (indefinitely) banned under those names and IPs? This information is used to keep track of ban bypassers. I think they have an alt but I don't remember the name.

6. Duration of the ban (Set a duration that reflects the severity of the offence.)

1 year maybe

quack95 · July 20, 2023 at 9:10 PM

I would like to add the victims of this IP-logging massacre:
__veast
PatoCalzoncillo

EpsilonBot

Yurni (with consent)

G6_ (with consent)

**Alco_Rs11** · July 20, 2023 at 9:10 PM

I Vouch and witness.

I'd personally go for an infinite ban duration given their extensive history of maliciously attacking/exploiting the server causing extensive damage in one case.

This might be an exploit with Figura.

Code

[02:06:29] [Server thread/INFO]: maniaplay issued server command: /eseen 146.70.132.86
[02:06:52] [Server thread/INFO]: quack95 issued server command: /eseen 146.70.132.86
[02:06:52] [Server thread/INFO]: maniaplay issued server command: /eseen 146.70.132.86
[02:07:25] [Server thread/INFO]: maniaplay issued server command: /eseen 191.17.46.5
[02:07:56] [Server thread/INFO]: maniaplay issued server command: /ewhois 146.70.132.86
[02:09:09] [Server thread/INFO]: maniaplay issued server command: /eseen 146.70.132.86
[02:22:55] [Server thread/INFO]: maniaplay issued server command: /eseen 178.32.24.193
[02:28:12] [Server thread/INFO]: maniaplay issued server command: /eseen 146.70.132.86
[02:28:12] [Server thread/INFO]: maniaplay issued server command: /eseen 146.70.132.86
[02:29:57] [Server thread/INFO]: maniaplay issued server command: /eseen 192.210.204.75

Example of G6_ IP.

EpsilonBot IP:

**wild1145** · July 20, 2023 at 9:18 PM Official Post

Can someone explain exactly (In as much technical detail as people want) how she is getting other peoples IP's at all please? It's not clear in this thread.

gamingto12 · July 20, 2023 at 9:18 PM

Quote from Alco_Rs11

I'd personally go for an infinite ban duration given their extensive history of maliciously attacking/exploiting the server causing extensive damage in one case.

100% vouch and agree with this

The first time I was admin I'm pretty sure maniaplay had an LBR (at the time IBR) out for them probably for exploiting and stuff.

This is absurd.

quack95 · July 20, 2023 at 9:23 PM

Quote from wild1145

Can someone explain exactly (In as much technical detail as people want) how she is getting other peoples IP's at all please? It's not clear in this thread.

All we have as of now is a figura exploit or just an exploit that we don't know of

**videogamesm12** · July 20, 2023 at 9:40 PM Official Post

It is not exactly known what the exact source of the IP addresses is, but theories arise.

A working theory is that Luna used a malicious Figura script (because it lets you fucking do that) to log players' IP addresses. Everyone affected except for EpsilonBot had, at some point, installed Figura and used it on the server. Luna's comments also from yesterday seem to strengthen this theory. However, this has yet to be confirmed or denied.

Another theory is that Luna used IP addresses collected from IPTFreedom to collect people's IP addresses. However, Fres/PatoCalzoncillo (a player who was affected), has never joined IPTFreedom without using a VPN, and his non-VPN IP was collected.

Vouch nonetheless.

**wild1145** · July 20, 2023 at 9:43 PM Official Post

Based on the information right now, this is a strong vouch and the potential to become a Cat 0.

Gommeh · July 20, 2023 at 9:52 PM

Vouch. Should be global as well since they broke a law and I'm like 99% sure this breaks TOS as well

I also witnessed part of this (or at least, the aftermath) on Discord

isaac · July 20, 2023 at 9:57 PM

Vouch and witness, Rule 3 was violated hard. The server unfortunately did not take this information very well. The server community was disrupted due to these actions.

Gommeh · July 20, 2023 at 10:02 PM

Quote from isaac

The server community was disrupted due to these actions.

agreed, the server was impacted HARD by their actions; hence why they are also banned from the Discord

qrtrx4 (twoeighths) · July 20, 2023 at 10:36 PM

Quote from videogamesm12

A working theory is that Luna used a malicious Figura script (because it lets you fucking do that) to log players' IP addresses. Everyone affected except for EpsilonBot had, at some point, installed Figura and used it on the server. Luna's comments also from yesterday seem to strengthen this theory. However, this has yet to be confirmed or denied.

Another theory is that Luna used IP addresses collected from IPTFreedom to collect people's IP addresses. However, Fres/PatoCalzoncillo (a player who was affected), has never joined IPTFreedom without using a VPN, and his non-VPN IP was collected.

Is it possible they could've used multiple methods to acquire IPs? That would explain the inconsistencies in who's IP was grabbed in both possible theories.

Either way, this is a vouch, through and through, for an infinite ban. This is genuinely inexcusable and could likely be genuinely illegal. Their previous history, according to Alco_Rs11, doesn't help their case either.

**wild1145** · July 20, 2023 at 11:24 PM Official Post

Given additional information that has come out tonight, I am approving this as a Category 0 global ban (All platform ban) with a minimum of a 2 year appeal duration.

Alco_Rs11 & Luke Would you do the honours please?

**Alco_Rs11** · July 20, 2023 at 11:56 PM

Quote from wild1145

Given additional information that has come out tonight, I am approving this as a Category 0 global ban (All platform ban) with a minimum of a 2 year appeal duration.
Alco_Rs11 & Luke Would you do the honours please?

Added.

LBR - maniaplay

Alco_Rs11 July 20, 2023 at 11:56 PM

Alco_Rs11 July 20, 2023 at 11:56 PM