wow, didn't think it would occur, but we had a botter on our server today!
I joined in VK's playground while the game was ongoing and seemed to be the first who noticed this guy who kept on killing and headshooting guys like dozens of times in a row with lg and primary shock only, NEVER missing, definitely (and I am VERY careful with those accusations knowing what guys on iCTF and TAM are capable of) using an aimbot or at least trigger. first his name was "NoName" then after other guys noticed it, he renamed himself "Me" ... i asked if anyone could spot him, many trustworthy guys (like tgh for example) strengthened my apprehension, except Evangeline for some strange reason. maybe he knows this guy? we should ask him since there is no reason to defend an obvious cheater.
when VK switched to spec mode and recorded the guy, he stopped doing it and went on running in circles as I heard. the killing suddenly stopped as well then obviously.

I hope you can not only find out the IP, but what is more important for us find out HOW he did it. i find it very concerning.

greetz
thom

Stats of the match: http://ut2004stats.epicgames.com/matchstats.php?match=52567281
I think it's the guy named 48302375833039849029.

Obviously, 89 kills for 17 death, and 64 with lg, he's a cheater.

Kent'

Got no good movie, like thom said he turned circles" on and on' Mallfunction =)

that's him - strangely those stats don't prove anything, since he only has 6 headshots (and I'm quite sure Mishutka said he also was headshotted each and every single time by him)... is that even possible? I'm confused (still certain about him botting though since he also hit each shot with shock rifle across the whole map without missing any of 'em)

ELO Ranking at Match Start (Change)
Week Month Alltime

4 48302375833039849029 0.00 (+40.14) 1.12 (+41.48) 8.89 (+44.42)

Did u see his progress? 40 is just insane, never seen anyone doing that before. And if it is possible, its is also a new player with different nicknames and when start recording he quits doing it, only turning in circles.

AND:

Weapon Specific Totals
Weapon Frags Primary Kills Secondary Kills Deaths Suicides Eff.
Lightning Gun 64 58 6 8 0 88.9%
Shock Rifle 24 24 0 4 0 85.7%

And 1 flak kill and minigun.
:/

His "Individual Frags" curve is insane. He joined at 4.2 into the match, where his curve quickly raises above all others. That upward trend continues until shortly after he suicides by drowning? (WTF?) After a short pause it continues its upward trend up to the point at about 22 where he no longer shores anything. I suppose that's when he started the circle stuff. That curve and his preference for Shock and LG makes him suspicious enough for me to not want him on my server if I had one.

A few things I'm unclear about:

thomasito wrote:
[...]definitely using an aimbot or at least trigger.[...]What's a "trigger"?

thomasito wrote:
[...]first his name was "NoName" then after other guys noticed it, he renamed himself "Me"[...]Ummm, neither in the suspected match, nor the previous or next one is anyone using such nicks. Are you sure about this?

thomasito wrote:
[...]many trustworthy guys (like tgh for example)[...]tgh isn't on the playerlist in the match stats that kent posted. He is in the next match though. Was he speccing?

thomasito wrote:
[...]i asked if anyone could spot him, many trustworthy guys [...] strengthened my apprehension, except Evangeline for some strange reason. maybe he knows this guy? we should ask him since there is no reason to defend an obvious cheater.[...]You do know that Eva is actually Mad_Max who's been evasive, deceptive and insincere when asked anything about "himself" over the past 2 months, right? In fact, after LaboRHeinz matched Eva's IP to Mad_Max (while I was there) and confronted him numerous times about the continuing of his usual bad habits at CEONSS (teamswitching to winning team, cursing at teammates all the time when they lose, etc.), he eventually had to ban him a few days ago for being too annoying. If I'm remembering right, he also still carries a few grudges against certain ppl (you included?) so IMO his fickleness here is no mystery or something that should be given any credence. I think this is as good a time as any to officially raise the question here, why is Eva still a member of this "clan" when Mad_Max wasn't let in (or didn't want to be in it, I don't remember which it was)? Foibo?

thomasito wrote:
[...]he stopped doing it and went on running in circles as I heard.[...]What do you mean "running in circles"? Can you elaborate more here?

thomasito wrote:
[...]I hope you can not only find out the IP, but what is more important for us find out HOW he did it. i find it very concerning.[...]Very much agreed. If Foibos can see whether the server log registered any sort of anomaly (illegal class loaded, illegal command used, whatever), that could shine a light into what exactly he was manipulating. Either way, if even one person has found a way to circumvent the latest AntiTCC checks, there's no guaranty that the cockroach rule doesn't apply here (for every 1 you see, there's 10 others around) which is deeply troubling and will cast plenty of doubts among players until a fix comes out. Wormbo?


Another thing that sticks here out is that he bothered to set his nickname directly through his User.ini instead of using the ingame textbox at Settings->Player so he could exceed the 16chars max limit. Of course that merely indicates desire to be lame or deceptive about his nickname in a blunt way and nothing else, but then there's more. I combed through his entire playing session yesterday (Dec 29th 2010, 4:02:07PM - 8:43:22PM) and there appear to be a couple of sequences where either his performance wildly fluctuates between impressive and poor from match to match or he appears and disappears based on the presence of the server's admin or a distraught user requesting admin intervention through nickname change.

Case 1 (5 matches on the "îTS.NL" ONS server right after he leaves TechCom):
Match #1, he joins from start, gets all his frags from hitscans, has a killing spree, 9K/2D/1S, match ends in 6mins and he places 1st in the scoreboard [*20*, 18, 11, 11, 11, ...].
Match #2 is probably on a new map for him (ONS-(RTS)RedBluff-32p-RC1), joins late and doesn't really get his bearings throughout the game. Still, he gets 7K/3D/1S, again all on foot kills from hitscans, 1 spree, match ends after 9mins and he's low on the scoreboard [9pts vs 37pts for top scorer].
Match #3 is on a familiar map (Dria) and he comes out strong from start: 27K/3D/0S (18 hitscans, 10avrils), 1KS, 1Dominating (only he has any kind of spree), match ends 11mins in and he almost double scores the next best player [*63*, 35, 29, 19, ...].
Match #4 lasts 5mins on RedPlant: joins at start, 1(SR, first blood)/0/0, nobody sprees and almost double scores 2nd scorer in the end [*23*, 13, 8, ...].
Match #5 is a 3vs3 on Mael_NV: joins at start, 16K (15 w/ SR)/2D/0S, 1rampage, match ends at 9min mark with scores [*99*, 84, 62, 40, ...].
So here we have a sample of his play where he joins iTS.NL ONS and kicks everyone's ass with hitscans for 40mins. Of course, it could just be that it was late and only curious newbs were on at such an hour, but still. He then starts server hopping for a while.

Case 2 (2 matches on the "îTS.NL" ICTF server about 25mins after last case, both on CTF-FaceClassic):
Match #1 he joins 3mins in (had to DL map?) and immediately shoots up in frags, gets an impressive 89K (all with a scoped SSR since it's ICTF)/14D/2S and pretty much monopolizes sprees with 6KS/1R/2D. Note that among the players, one is using the nick WE_NEED_ADMIN although he was there in the previous match on the same server as well. Match ends in 15mins and he places 2nd: [117, *101*, 78, 62, ...].
Match #2 he joins late for some strange reason (6.7mins into the game) and plays a completely deflated game with 3K/6D/0S and no sprees. WE_NEED_ADMIN is still around all through the match and when it ends after 16mins our guy is almost at the bottom of the scoreboard with 6pts (top player got 102). He now decides to switch iTS servers.

Case 3 (string of matches on "îTS ñôrdîç" ICTF server, all on DM-Rankin):
#1: joins @start, gets FB and 1KS but at 3.4mins in he mysteriously disconnects. At that time his stats are 9K/4D/1S.
--- dicks around at [GD] server, ICTF match
#2: joins @start, does great [73/26/0, 4KS], comes 1st [*73*, 51, 41, ...]
#3: joins @start, does well [64/37/0, 3KS], comes 1st [*64*, 53, 41, ...]
--- dicks around at [GD]
#4: joins @start, does great [71/25/1, 2KS/1U], comes 1st [*75*, 44, 35, ...]
--- dicks around at [GD], {Poke}, noname ut2k4 ICTF serv
#5: joins @start, does great [70/32/2, 3KS/1R/1U], comes 1st [*68*, 47, 18, ...]
#6:joins @start, does great [64/23/2, 6KS/1R], comes 1st [*62*, 47, 9, ...]
--- leaves nordic, plays 4 more lame TDMs, quits UT
Again, a sample of very good hitscan performance.

Overall, I don't think any of this is conclusive to prove he's botting, but IMO it's certainly grounds for caution if his IP happens to pop up on TechCom again, I'm sure many of us would want to (at least) know about it.

Chat logs: http://sharetext.org/HV Part of Anti TCC log: [2010-12-29 22:15:25] - [Connect] NoName [ 3241ecbaa16d29c2707b6ba7458479b8 ] IP: 217.120.164.97 Security ID: 32 Location: http://geoip.co.uk/?IP=217.120.164.97 No cheats were detected, but some new cheats are impossible to detect. The Anti TCC log is full of this (every player on every match on this map has it - it's some other problem I guess, maybe with the map): http://sharetext.org/HW He was using some "public" ID, his IP (217.120.164.97 or 217.120.*) was logged only during this match. The IP has been banned. Thanks for advice.

Edit: Wanna know Mad_Max's identities (if his ID isn't "public" or his PC used by more players)? Anti TCC players log: Player=(Id=" - ",LastSeen="connecting at 2010-12-30 22:16",Names=("Franziska","Mad_Max_(GER)","[*]Évangéline","Dance_With_Me", "du_Nutte","Web-Admin","Maria_Hu_Anna","oh-so-leer-hier","EVA", "Dance_With_M", "Pizza_Hut","Born_TO_KILL", "FOIBUS", "Évangéline", "Influenza","scapegoat","Cinderella","Mad_Max(GER)","sam","mariahuanna","Évangéline_Arg","Player15","euthanasia","Hamburg","Viva-Fc-St.Pauli","Fc-St.Pauli","HAMBURGER", "Player30","Player35", "Bizzarre","Firefox", "pivo_tvu°rce","Trüffelschwei...", "Trüffelschwein","Player36", "FC_ST_PAULI", "MadMax_GER", "Player34","Player14")) I'm not sure about removing him from the clan. Should I do that?

wow, that looks like alot of effort!

I am very sure about those nicks!

a trigger is a bot set on a key (like crouch) that "triggers" the aimbot on and off while you are holding it or until you press it again. it's like an advanced aimbot I'd say and harder to detect for others as he can switch it off whenever he wants too (and therefore also performs very poor at times)...
what caught my eye is that he barely has combo kills, only primary shock kills. suspicious the least...

the thing that made me CERTAIN he is botting were those times (several!) when he shocked me across the whole map (like from core to the further of the middle nodes) no matter where I dodged or whatever (as if the crosshair was constantly on me) WITHOUT missing a single shot, PLUS hitting the next guy almost instantly after. I have never come across anyone who could do that, even the best KIN, MP3, GD, TCP, C:/ guys and whatnot top hitscan-clans there are - they DO miss shots. he didn't. i know the stats are not conclusive but this should speak for itself.

what is more, he didn't bother to move alot or dodged when being attacked (many times even didnt notice / move at all!) so in case you survived his attacks (e.g. when I had 199hp when he continously hit me with shock instead of lg) it was kinda easy to kill him... usually guys of that skill-level (and here it is no skill) are also very hard to hit due to their elusiveness elaborated through years of experience. that wasn't the case here.

what was also notable is that he voted against himself OO
i mean wtf...


oh and yeah, tghjtgh of mp3 (himself a skilled hitscanner as well) specced him and did second my savvy...
--> 1219.19 CHAT NiF-NiF Kick -> NoName
(NiF-Nif is tgh, he changed nick later)






btw didn't know at all madmax was evangeline! always wondered why he spoke that broken english in a way only germans do -.-
thx a bunch for the info!


(UPDATE)
thx foib for the chatlog

pegasus_ wrote:
A few things I'm unclear about:

thomasito wrote:
[...]definitely using an aimbot or at least trigger.[...]What's a "trigger"?
A trigger bot is basically like an aim bot, except it leaves aiming to the player and just takes over pressing and releasing the fire button.