Aimbots in 3.2.0

Etnies` · Post by **Etnies`** » Wed Jun 15, 2005 8:38 pm

Just thought id spread the word :

http://www.splashdamage.com/index.php?n ... ic&t=12321

ouroboro · Post by **ouroboro** » Thu Jun 16, 2005 9:45 am

http://www.forums-center.com/viewtopic.php?t=5895

deej · Post by **deej** » Thu Jun 16, 2005 10:09 am

Had one of those clowns on our servers too but he got booted by PB and marked red by ETPro. So I guess there's a new hack in town.

Lekdevil.NL · Post by **Lekdevil.NL** » Thu Jun 16, 2005 4:24 pm

Thanks for the heads-up. Two of these jokers were indeed on the QuakeCon tourney servers, so I got their IAC outputs. Hopefully these will be useful to bani and crew. Note that ET Pro anticheat did not mark them as cheaters, nor were they kicked by PB. PB screenshots turned up as "application not active" as well.

(Sorry for wrecking the page layout.)

Code: Select all

00000035.log&#58;&#91;06.16.2005 01&#58;22&#58;24&#93; Player GUID Computed 95744e1033f218c61b474aeb54932e87&#40;-&#41; &#40;slot #5&#41; 65.28.232.172&#58;27960 schnapps
00000035.log&#58;&#91;06.16.2005 01&#58;25&#58;03&#93; Player GUID Computed c1ace57a3ea271da250f4dbb975aaca7&#40;-&#41; &#40;slot #7&#41; 65.28.232.172&#58;72 ^7O^t0^1m^7p^ta^7L^tO0^1m^7pa^0$
00000036.log&#58;&#91;06.16.2005 12&#58;48&#58;23&#93; Player GUID Computed 9be2cf4b4d9fcac005133f2550cefdeb&#40;-&#41; &#40;slot #10&#41; 68.221.79.197&#58;34444 ^wWo^tJo

01:22.26 etpro IAC: 4 [schnapps^7] [1333333333333333333333333333333333333337] [win32]
01:22.26 etpro IAC: 62K5aUiSSJLcS4YjeJrvcu9OwuSuU7WGvW4hjimdRukI8sH2cyC4XrMNOz30n+lbBFkBu4aaIZP96JUpV2zWljY3vXxRCKaZIz-01f2ZVcfgKSJhVPjCIrRABlboFBQD-lrN70bBN8FJPCVXQhZZME-3S4Xy-nGnhSpZG+U04ATmhNvTNL5aJQ7NSnyalRubFUpMBK4NZOa5zDELeoK0qfpWo2wx9NCVE9b+otocFM-log
01:24.45 etpro IAC: 4 [schnapps^7] [1333333333333333333333333333333333333337] [win32]
01:24.45 etpro IAC: ayL2YIzmJQZcd3m3ObGhlzVnnMqCO0s8pKb3aGykojvWEHhnkMVKR1TkSmCPtABw2+FB0KutRl8kXVQBaG9EXKajoE4B10yhljylltefyJPd6MvWq3sY0IrmRddT+Uun5ghhnVLlImxFIjUaWnfPMe7JIeHzohtMv0ttpCt3jWZmBtkM0-BRIYJ1TUUh1SkgVXj3+4EYRUIEt-+On-QzfgyAo1vBBoR5rt4TSRMF97JpNg
01:25.13 etpro IAC: 6 [^7O^t0^1m^7p^ta^7L^tO0^1m^7pa^0$C$^7] [1333333333333333333333333333333333333337] [win32]
01:25.13 etpro IAC: CJZIVdT4P7QQXdUP0G1pqqqvaCINMpIbb+xYffh1oWVWOpiZyALTHMmwHNGxsSah62oCq1qJfRi1IopwfLsAdEj-kog7KD2cnicw8rhO3sSL1VcT8Vw6DHauEqgfziEDn2db7Ctmdn9HCAs0YDzn2P4TqfB0dW4KxVfx9eG0OgEi9GP0Hgl8S2-XS9EVa3joYWihH1MDXUhjR2GZecwjphrHPC-+gwlAt+soYRw+AeOljzFeDXvhpg36cjLRPoQ62N4yuypj0KfoTn7gbqQ
01:39.59 etpro IAC: 6 [^7O^t0^1m^7p^ta^7L^tO0^1m^7pa^7] [1333333333333333333333333333333333333337] [win32]
01:39.59 etpro IAC: ZS0aLBJ+nK5pYKqAxEU4AZ9QHYYg5D5jwuUhZkgauEdRj1mrJng+mJl12tQdN6e+qU6lgS6sr8g56WLnSBmYmcIqjYrqhFnlXWfuL5csICX+4khL23NTybrMfKv9cjEhJJFd4Hlq3UGpo1mpf9Zr4rxf4SIsK11yNqgrw9q+DyxmsosUJFjGuRYRl+lOTstnUUMokM+kymT1HgsFB3VzA7wVUDGyr+bxk5f0nBCI8+M4MYdX7pqKUZFFX9f22rjstiBejqiHXF8d
01:40.00 etpro IAC: 4 [schnapps^7] [1333333333333333333333333333333333333337] [win32]
01:40.00 etpro IAC: pN0UZmd+m+RgcUcxrdWTQ8EUlENwPnbt0+pBNfbbROCvh3iZhNNoyzTdEmF4vbRK3+uuNU+QrneCO66Tu2FighX5z8-b6RqWbfQpSFjHEieh23SYGJWBGNDXWu8W5s8EtMurK-AJ8zSr6AVHpqX6Y9NyHdBj0pxFL+e3LUcFb-2rg5vQpJI9tLSa3PRNUkSsqvdxpOY9zJQ7vU-NgnnDJwj1SyoHa5pZjodaALaV0IYrsg
01:42.01 etpro IAC: 4 [schnapps^7] [1333333333333333333333333333333333333337] [win32]
01:42.01 etpro IAC: BUPDbrWymUstflzgzRH7RWi4Q+dhlWNsPGzPOgi3QUAw-gvqrg6nYnPACur+K+0nuYkbAk9E9WsZPLOHDeJx-67xBMP8BBPDkO139muJeTedwQM6QVyU8ANB1KzE+4P0TcY7AZMaAyuvJakeIiR5doBSAFeO2aU72hzPRNOivwTpTmEcTsbxQRVbIYbiLOyzWOwPb-XLAjT7kYdgS6xt61Kv7aUG66xQPDmIDq+4CURaYA
01:42.01 etpro IAC: 6 [^7O^t0^1m^7p^ta^7L^tO0^1m^7pa^7] [1333333333333333333333333333333333333337] [win32]
01:42.01 etpro IAC: OlDmEzfjEeOeBI7DNRZ3zd1TuSHUVvlMLCkPdwnbq2rjsXDvMQakzM3-WzuT3PsdN07ZO-80FgvpIRjrf-3xFph4uLDg0NGoOjsbx3pHz6dcccdpaH-JJEUqQtgQg0zFcVRlZtLRgaEKZ7e3ivelVw3QiKs9+talYkT7TkYEjSyz7zLtmo3ndEUQVt+YGiVa9ZbNp+SD+w1uD7CdrJ-iZVs649SxfQ3gCQ1cb3b5bigccysAKhbRmKBiJ1ZdEVjYqE7a7v1fgeiR
01:49.28 etpro IAC: 4 [schnapps^7] [1333333333333333333333333333333333333337] [win32]
01:49.28 etpro IAC: 0HS1WdZHqgWtEc2lnbawrsuZG0RAzcCTtzBbpL-HAtIHaZ1eo0qi6SLjWhErMRXu7C3T6WASx7h4sGvMV-OBJAmyYKYjwxy2oagBwI1qK6lwakObURFfcAoZW6Op0e8dXu0HFI2DdcKJNJnCMQ-N1LFlxBSpDe2F7n+iMgzvG5yXPkELwj+IdVIZr0OsQJ9PlE2ctQXtDD9JtONKGNOTFXiOdPKmf09+j3SmBMqdvvYIkA
12:48.24 etpro IAC: 9 [^wWo^tJo^7] [1333333333333333333333333333333333333337] [win32]
12:48.24 etpro IAC: ujpcQh-7jCOmr7rMbtYfu+ZxZw3pFFbZrBUSnX7PWwdy5JK7atZI5jtuUmN2gQc03ynVZXm6lRzhLR+GpAARO62Mww+gHAQ3UtGO0aBmPueeT7ZPxj2HSclPAfrr3AcRPitSMvlRoVN2Y5NybPV6Ehs7fLyqEh5EiGMgpym3CsM+1NfYnVtmnvx26q530lzqjWUIyyq3HyWROgoICBf7PNEfdfNRSqpdUEiATR6syg98aD6uqo2t9f6A8YifRD7KKfobaOoLY43m9ougRQ7P7FS1NtyxXG+UPg
12:51.06 etpro IAC: 9 [^wWo^tJo^7] [1333333333333333333333333333333333333337] [win32]
12:51.06 etpro IAC: Shf4a0I1qtysS50Lh08NodnAySm0cxdTvBMveseVZdv-T5Z5wI7p-1UtIzGyjDobIi8iUtFmE2dTKL6Z9H5pk-2ODUPtjkkjkHUtw9AX-2HG2e7k9saYksJrAjLFTKLswA110rxLTlb8zUoE9ZIHpgkaFwZRUqljN0piKKzFXBqTn9NFem8iR2MvUpBQ+bNLs6xyMNz76jGJTBpGv-O9vhadRFqMNwkIP+C2rr1VJxQ7vp9rcM7eCUB2AKWXdxWj1IDHUoOAWYge4Yrk9fBcLro2-51LK0fS7g
12:51.46 etpro IAC: 9 [^wWo^tJo^7] [1333333333333333333333333333333333333337] [win32]
12:51.46 etpro IAC: 1unCMTlo965VrjNyQmLMTA6pkeMER9vPa7Nrtx0oytmkupzxWwe7H2jXFAnHT2hrbok4IvAADEgyGil+089VaLMskzPkDVjikS5TqVvR9btislgHrqTDhaFsdtRtT5aObRKmqULvhTmKpS2DFzc6k9tglR6F+wAY511wbsrhdgMa2XCFCDXitzUNFGyE9UyCZj+9rHvNdsHoFOVMN7TXZInH+yAhnhPYF-fSfxJ7ly9IWcacrtD8HGZPo6l4HaJ4C8OojFbfgAAIFdgONhy9ZUTc1354b6JO0w
12:58.51 etpro IAC: 9 [^wWo^tJo^7] [1333333333333333333333333333333333333337] [win32]
12:58.51 etpro IAC: 7znhQmfjjThcnhoYkHsdmCLdJvXCKcEJBamtSNVNPaFN-oU6+18QNQ4WUwTWsAWxqf9U0TOYS5ZzMfHikbmrb9pnIjVmwFM-OWlard83kWT4Xj4EoukTDEPLLbbql0xj80As+4vrBavyrQaAq7TuVOwchSZo9oeIa9dUvwnofel-Sig4fTdXwBvZbYLgTsbm3bXZrPXDxZ0eFGQkdIsIc1uN6kzgEab0XdxFoWS7KyezuXMr9WghnIKZIkewdZlnFL8AlIni-J4zGJ3wBG9NccqpzqzSa63T2A

ouroboro · Post by **ouroboro** » Thu Jun 16, 2005 8:04 pm

cool thanks for the ip's. i'll banmask them on our server. not that it will help, but it's all i've got

we need hardware identifiers. i'm tired of being powerless to ban punks.

deej · Post by **deej** » Fri Jun 17, 2005 2:18 pm

ouroboro wrote:we need hardware identifiers. i'm tired of being powerless to ban punks.

Well the problem there is that there are already tools that spoof your hard disk every time so the global PB ban has been rendered useless already.

Mark · Post by **Mark** » Sat Jun 18, 2005 12:16 am

Hi,

not totally useless. Some think, it is cool to use 1333333333333333333333333333333333333337 as etpro guid.
With etadmin_mod i would just ban this mask (possible sind 0.28). Same with those 123456... guids.
They are faked, so those people can play somewhere else or have to reconfigure their tool ^^.

Some might say: Hey, thats useless, because they just change it.
Maybe, but i see this guid at least the second time, therefore it isn't useless.
Think of a cheator, that visits your server the first time with that guid and
gets kicked immidiatly for cheating. Guess, that will be a surprise.

Greets
Mark

deej · Post by **deej** » Sat Jun 18, 2005 1:43 am

LOL that's a great idea Mark!