About what happened to the Parks & Skaters UL/DL section

Krad · 18 · 50681

Offline Krad

  • Administrator
  • Jr. Member
  • *****
    • Posts: 75
    • View Profile
On Dec 18th and into the next morning, a user uploaded about 250 fake .PRK files in the THPSX database. The user also injected meta tag redirect code through the upload system which redirected park files, and the main Park/Skater link to pornographic websites. Once satisfied, the user uploaded a false .SKA file to the skater side.

I'll post the image at the end of this, but the first thing that we did after seeing what happened was locating the IP that was used to upload the files. We cross referenced that with accounts registered on the forum. I'm going to first point out the obvious by saying that the forums, and the skater/parks at the time were completely separate things, and that they did not have any correlation with each other. You previously did not need a forum account to upload files. Theoretically before yesterday, you could have been completely anonymous when uploading a .prk or .ska file.

So the only account that matched the IP address of the user who uploaded the files/redirect codes was Snipe's account. Over the course of conversation with Snipe on Skype he told me that this was not him, that it was not his IP, and that he was not on the site at that time because he had work at 4:30 the next morning. He deleted the one post that tied the ip's together later that day.

The image pretty much shows everything. We see that under the OpenSpy Log Snipe's real IP is 190.84.34.31. The IP belongs to a region in Colombia which is where he's stationed, confirming it's his. The IP used to upload the files is 186.169.235.5. If you view the THPSX log, you can see Snipe was on with his real IP, and that he was on seconds before the uploads started happening.

On the bottom right is a conversation where Snipe says he wasn't even on when the uploads took place. He says he wasn't on "at whatever hour in the night", and then he corrects himself "or morning or afternoon" as if he made a mistake, as if he shouldn't know what time it happened. But to reiterate, he indeed was on exactly when this started to happen, as the IP's show. Not just on around the same time, but when it started.

The access logs, or "THPSX logs" show both ip's are on a linux machine.

There's other circumstantial things that point to Snipe, but I'm pretty convinced with everything here. As a result of what happened, we didn't want Snipe logging into the IRC Peerchat server of OpenSpy where he would have administrative access over all users who connect to OpenSpy. Someone who purposely redirects users to pornographic websites obviously doesn't care for their online safety. I expressed to him that I would have no objection to him still being able to play THUGPro.

Snipe started flooding the THUGPro lobby with fake rooms a day later with anti-thpsx text as the host name. When I asked him about it on Skype he eventually blocked me.

So that's what happened. You'll start to see things returning back to normal. Sk8ace took down the skater/parks section 30 minutes after the last upload took place and has spent a lot of his time bringing it back and making it more secure. If you have any questions or anything feel free to post.

« Last Edit: December 30, 2016, 10:03:36 pm by Krad »


Offline Skater1014

  • Upload Approved
  • Hero Member
  • ****
    • Posts: 935
    • View Profile
    • Discord: bailey1014

Offline Anntire

  • Upload Approved
  • Newbie
  • ****
    • Posts: 41
  • Someone come kick my ass!
    • View Profile
Jeez thats super fucked up, it honestly baffles me that someone would have such a strong vendetta as to do something like this


Offline TomoAlien

  • Upload Approved
  • Jr. Member
  • ****
    • Posts: 66
  • Rebel Enforcer
    • View Profile
So this is why he made "FreedomSpy".
Apparently tracking IP's for malicious activities is a horrible thing. How dare people take measures to stop hacker attacks, eh?


Offline Boomtime

  • Upload Approved
  • Full Member
  • ****
    • Posts: 209
  • nerd man
    • View Profile
    • Twitch
LMAO, I fucking trusted that cunt. Good to see the section back up now.
You ever hear about video games?


Offline ShutMeUp!

  • Hero Member
  • *****
    • Posts: 866
  • I can't wait for you to ShutMeUp!
    • View Profile
    • ShutMeUp's DevonttaieArt.
Same, i got a bit of a bad vibe about him when he made FreedomSpy because i was thinking:
Incognito Browsing has its uses that are not.. "These uses", but how can something like that have a legit use?

I guess it's the best tool for the worst people.

Why would Snipe do this stuff in the first place?
"Winners never cheat.
And cheaters never win."
-HooL (Quite a while ago)



Offline BlazE

  • Upload Approved
  • Sr. Member
  • ****
    • Posts: 295
    • View Profile
Same, i got a bit of a bad vibe about him when he made FreedomSpy because i was thinking:
Incognito Browsing has its uses that are not.. "These uses", but how can something like that have a legit use?

I guess it's the best tool for the worst people.

Why would Snipe do this stuff in the first place?

I use FreedomSpy. No particular reason other than privacy.
Find mods and tutorials by me at www.tnthps.us


Offline ShutMeUp!

  • Hero Member
  • *****
    • Posts: 866
  • I can't wait for you to ShutMeUp!
    • View Profile
    • ShutMeUp's DevonttaieArt.
Oh, well, in that case, it's understandable, but for people that got banned, reaally? Abuse is bound to happen.
"Winners never cheat.
And cheaters never win."
-HooL (Quite a while ago)



Offline Krad

  • Administrator
  • Jr. Member
  • *****
    • Posts: 75
    • View Profile
There's no active tracking or going on for users that connect to OpenSpy. If something malicious is going on then something can be looked into to either prove guilt or innocence, but other than that everything is just left alone.

The only reason I can think of as to why Snipe did this is because about a month ago he wanted his tracking bot on the IRC server to track users connecting to OpenSpy for his stats page. I told him I didn't want his bot tracking people. Then he tried to disguise the bot as his personal IRC. When I found that out he got pretty aggravated.

For people that think FreedomSpy means privacy, you're sharing your information with 2 servers now instead of just OpenSpy.
« Last Edit: December 24, 2016, 02:04:31 pm by Krad »


Offline SK8.William

  • Upload Approved
  • Sr. Member
  • ****
    • Posts: 470
  • pfp art by ShutMeUp!
    • View Profile
    • Youtube Channel
I can't express myself being polite.This is horrible, man, what comes in the head of someone to make such a thing?
THUGPro Custom Story Mode is out!
PLAY IT NOW!


Offline Snipe

  • Newbie
  • *
    • Posts: 15
  • THPS.TK
    • View Profile
    • THPS.TK
Correction to OP, 186.169.235.5 is a Colombian IP (Not mine though as stated before mine is 190.84.34.31)
The IP of the uploads is instead 185.169.235.5 (Netherlands) not 186.169.235.5 (Colombia).

185.169.235.5 IP info:
http://www.infosniper.net/index.php?ip_address=185.169.235.5


Offline sk8ace

  • Administrator
  • Hero Member
  • *****
    • Posts: 683
    • View Profile
With VPNs and TOR proxies, the source of the 185.169.235.5 IP is irrelevant.



Offline Snipe

  • Newbie
  • *
    • Posts: 15
  • THPS.TK
    • View Profile
    • THPS.TK

Offline sk8ace

  • Administrator
  • Hero Member
  • *****
    • Posts: 683
    • View Profile
This was after we removed him from Openspy. I noticed snipe was attempting to log on through multipe IP's so I ran a command that showed all his aliases. There is no dispute about whether he uses his servers/VPNs/Proxies and/or GOVT IPs.

* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 03:26
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 03:26
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 03:36
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 03:36
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 03:46
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 03:46
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 15:21
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 15:24
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 15:25
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 15:30
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 15:32
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 15:39
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 15:43
* [Snipe] ([email protected]): Snipe
* [Snipe] s :12/19/2016 15:44
* [Snipe] ([email protected]): ProSkater
* [Snipe] s :12/19/2016 17:28
* [Snipe] ([email protected]): ProSkater
* [Snipe] s :12/19/2016 17:28
* [Snipe] ([email protected]): epinS
* [Snipe] s :12/19/2016 20:38