Author Topic: anticheat: zek/hal9000 (aka Quaz, sKuLL, ...) caught with aimbot (Read 15836 times)

console · « **on:** October 24, 2008, 08:00:58 PM »

Greetings.

Looks like, given enough rope, Zek ("hal9000") has managed to hang himself.

Recently, r1ch alerted me that Zek was trying to slip an "undetectable" aimbot past anticheat. However, as usual, anticheat was silently logging the usage. After gathering enough data, r1ch has now blocked the aimbot. Here is an excerpt from the anticheat logs, provided by r1ch, indicating the times Zek has connected with his aimbot to various servers, including tastyspleen servers, and Zek's own server:

Code: [Select]

[2008-10-22 18:22:16 EDT] begin: client Igezekil -=[98.208.85.59] on server tastyspleen.net::dm[74.54.186.226:27916]
[2008-10-22 18:24:22 EDT] begin: client -=Igzekil=-[98.208.85.59] on server tastyspleen.net::dm[74.54.186.226:27916]
[2008-10-22 18:25:32 EDT] begin: client -=Igzekil=-[98.208.85.59] on server tastyspleen.net::tourney4 (OpenTDM)[69.9.168.4:27930]
[2008-10-22 18:38:34 EDT] begin: client -=Igzekil=-[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-22 19:46:28 EDT] begin: client -=Igzekil=-[98.208.85.59] on server tastyspleen.net::t4-noalias[69.9.168.4:27931]
[2008-10-22 20:05:12 EDT] begin: client -=Igzekil=-[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-22 20:18:41 EDT] begin: client -=Igzekil=-[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-22 20:46:55 EDT] begin: client -==-[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-22 20:49:19 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-22 22:01:23 EDT] begin: client Igezekil -=[98.208.85.59] on server California Team DM 24/7 Edge[72.167.160.121:27910]
[2008-10-22 22:02:30 EDT] begin: client NazekiL[98.208.85.59] on server California Team DM 24/7 Edge[72.167.160.121:27910]
[2008-10-22 22:19:29 EDT] begin: client NazekaL[98.208.85.59] on server California Team DM 24/7 Edge[72.167.160.121:27910]
[2008-10-22 22:21:27 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-22 23:53:34 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney2[74.54.186.226:27931]
[2008-10-23 00:59:29 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 03:18:24 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 03:30:22 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 03:43:49 EDT] begin: client Igezekil -=[98.208.85.59] on server California Team DM 24/7 Edge[72.167.160.121:27910]
[2008-10-23 03:45:01 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 11:05:59 EDT] begin: client RizeK[98.208.85.59] on server tastyspleen.net::dm[74.54.186.226:27916]
[2008-10-23 11:40:15 EDT] begin: client RizeK[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 13:40:13 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 13:43:30 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 14:11:15 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney4 (OpenTDM)[69.9.168.4:27930]
[2008-10-23 14:59:05 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 15:38:31 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney2[74.54.186.226:27931]
[2008-10-23 16:08:39 EDT] begin: client NazekaL[98.208.85.59] on server tastyspleen.net::tourney4 (OpenTDM)[69.9.168.4:27930]
[2008-10-23 20:10:24 EDT] begin: client =AzEkEaL=[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 20:12:19 EDT] begin: client [AzEkEaL][98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 20:17:12 EDT] begin: client [AzEkEaL][98.208.85.59] on server tastyspleen.net::tourney4 (OpenTDM)[69.9.168.4:27930]
[2008-10-23 20:31:00 EDT] begin: client [AzEkEaL][98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 20:47:36 EDT] begin: client [AzEkEaL][98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 20:47:55 EDT] begin: client [AzEkEaL][98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-23 21:21:01 EDT] begin: client [AzEkAeL][98.208.85.59] on server tastyspleen.net::tourney2[74.54.186.226:27931]
[2008-10-23 21:26:07 EDT] begin: client [AzEkAeL][98.208.85.59] on server tastyspleen.net::tourney4 (OpenTDM)[69.9.168.4:27930]
[2008-10-23 22:52:49 EDT] begin: client AzEkAeL[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-24 13:46:47 EDT] begin: client {Cazek}[98.208.85.59] on server tastyspleen.net::tourney4 (OpenTDM)[69.9.168.4:27930]
[2008-10-24 14:32:15 EDT] begin: client {Cazek}[98.208.85.59] on server tastyspleen.net::dm[74.54.186.226:27916]
[2008-10-24 16:05:17 EDT] begin: client {Cazek}[98.208.85.59] on server tastyspleen.net::tourney4 (OpenTDM)[69.9.168.4:27930]
[2008-10-24 16:24:31 EDT] begin: client {Cazek}[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-24 18:47:41 EDT] begin: client {Cazek}[98.208.85.59] on server tastyspleen.net::tourney[74.54.186.226:27930]
[2008-10-24 20:34:12 EDT] begin: client {Cazek}[98.208.85.59] on server California Team DM 24/7 Edge[72.167.160.121:27910]
[2008-10-24 21:33:27 EDT] begin: client [izekeal][98.208.85.59] on server tastyspleen.net::tdm-noalias[74.54.186.226:27933]

Note, it turns out Zek is almost certainly the same person as Quaz/sKuLL, who was banned last month on the same ISP for using the same category of aimbot.

Quaz/sKuLL's last IP before ban: http://www.geoiptool.com/en/?IP=76.114.23.150
Zek/hal9000's current IP: http://www.geoiptool.com/en/?IP=98.208.85.59

Both are ca.comcast.net, both in Chico, CA.

He seems like an especially nice guy. He made a nice implied bomb threat when banned from the servers last month (he was going by "q2pro" on the forums back then.)

Quote from: q2pro

Quote from: console
FYI - your use of the aimbot on your new IP is still being detected:

Deboa (76.114.23.150)
Funk Master (76.114.23.150)
Bob (76.114.23.150)
G I Joe (76.114.23.150)
Gin (76.114.23.150)
Gin (76.114.23.150)
Gin (76.114.23.150)
Taco (76.114.23.150)
Necromancer (76.114.23.150)
I can has? (76.114.23.150)
Pyroclastic (76.114.23.150)
Goatsi (76.114.23.150)
Ron Jeremy (76.114.23.150)

So I guess I'll be working on a ban for all of hsd1.ca.comcast.net. Thanks for wasting my time this weekend!

That's interesting I've never cheated in my life. Not sure what's setting that off maybe my anti-virus protection? As for banning all of Comcast I don't really think it matters since it's a VPN I use anyway, which I have about 40 others I can use and can get more if I need!

With the way you ban people that haven't even had a complaint lodged against them, I'm surprised someone hasn't dropped some bombs and put your servers to rest yet, honestly. Wouldn't be surprised if it happened to you though : /

Anyway, thanks to r1ch, and thanks to all those who alerted us about his bot-like behavior on the servers. We had begun receiving alerts several days prior to when the demo was posted.

Regards,

haunted · « **Reply #1 on:** October 24, 2008, 08:09:22 PM »

I'm surprised!

metaL · « **Reply #2 on:** October 24, 2008, 08:10:14 PM »

|iR|Focalor · « **Reply #3 on:** October 24, 2008, 09:32:27 PM »

What I said after watching the demo:

Quote

He was most certainly absolutely positively using an aimbot. I'd bet my fucking life on it, that's just how sure I am.

Since you said I was full of shit... does that mean I get to take YOUR life instead?

*pulls out an axe*

[BTF]EyEsTrAiN · « **Reply #4 on:** October 24, 2008, 09:56:15 PM »

Excuse my complete lack of shock.

So, does this mean he can be short-bussed on the forums if he comes here trying to "defend" more accusations (i.e. troll)?

Whirlingdervish · « **Reply #5 on:** October 24, 2008, 10:19:54 PM »

|iR|Focalor · « **Reply #6 on:** October 24, 2008, 11:38:33 PM »

Quote from: Whirlingdervish(Q2C) on October 24, 2008, 10:19:54 PM

Damn. The short and sweet "I told you so".

Arm0r · « **Reply #7 on:** October 25, 2008, 02:11:10 AM »

hahahahahahahahahahaha

Yotematoi · « **Reply #8 on:** October 25, 2008, 03:10:06 AM »

This is the C R O T C H ???

[BTF]Sigma · « **Reply #9 on:** October 25, 2008, 03:32:05 AM »

So what does X'tyfe have to say?

Arm0r · « **Reply #10 on:** October 25, 2008, 03:51:27 AM »

Quote from: [BTF]Sigma on October 25, 2008, 03:32:05 AM

So what does X'tyfe have to say?

probably the same old bullshit, even the people who agree with him end up being total piecies of shit (case in point) so im personally not supprised.

DaHanG · « **Reply #11 on:** October 25, 2008, 10:28:47 AM »

Randy · « **Reply #12 on:** October 25, 2008, 10:50:33 AM »

Quote from: haunted on October 24, 2008, 08:09:22 PM

I'm surprised!

im not,

X'tyfe · « **Reply #13 on:** October 25, 2008, 10:54:18 AM »

What do I say? Cheating is bad... But I don't care that he cheated or that he was pretending to be someone else. His actions after that far out way all of that. He single handedly took every one of you pieces of garbage on... The first person who has had THE BALLS to stand up against the lot of you in a long time, and he did a pretty damn good job too.

So who ever he was, he has earned my respect.

[BTF]Sigma · « **Reply #14 on:** October 25, 2008, 11:03:41 AM »

I don't think respecting ignorance is an admiral thing.

Author Topic: anticheat: zek/hal9000 (aka Quaz, sKuLL, ...) caught with aimbot (Read 15836 times)

El Box de Shoutamente