Here are some hacker detections that I felt were worth remembering either for lolz or because they showcase some of the bot's defenses.
There is a new anticheat feature provided by the Botman mod and used by the bot to auto-ban hackers. It often bans within 2 seconds of the hack occuring. I have censored out some info because this hacker was trying to smear the name of a gaming group as revenge for them banning him.
2020-06-22 00:18; Initialising new player record for 765611990686507## from 2020-06-21T21:18:30 14957.231 INF Player connected, entityid=1079033, name=[A Loser], steamid=765611990686507##, steamOwner=765611990686507##, ip=##.###.###.##
2020-06-22 00:18; New player joined Day 140, 18:21 2020-06-21T21:18:30 14957.231 INF Player connected entityid=1079033 name=[A Loser] steamid=765611990686507## steamOwner=765611990686507## ip=##.###.###.##
2020-06-22 00:18; Player 765611990686507## [A Loser] is being moved to lobby
2020-06-22 00:18; ALERT! Unauthorised admin detected. Player [A Loser] Steam: 765611990686507## Permission level: 1000 has opened an unauthorized locked sign.
2020-06-22 00:18; Day 140, 18:21 [BANNED] Player 765611990686507## [A Loser] has been banned for 10 years hacking
Here's more confirmed hackers that the new anticheat has caught. I will add to this list occasionally. The first one was caught in A19 which at the time hasn't been out a week. Hackers do not take long to hack new alphas. All hackers are investigated and if confirmed to be hackers and not something else like an admin caught without pants, I add them to the bot's global ban list.
[BANNED] Player 76561199067961145 TT has has been banned for hacking by anticheat.
2020-07-03T20:13:53 1095.265 INF ~Botman AntiCheat~ --NAME:TT --ID:76561199067961145 --LVL:1000 has entered god mode.
INF ~Botman AntiCheat~ --NAME:Jagalskarfitta --ID:76561199067814025 --LVL:1000 has entered spectator mode.
[BANNED] Player 76561197983251951 Smegz0r has has been banned for hacking by anticheat.
--NAME:Smegz0r --ID:76561197983251951 --LVL:1000 currently in god mode
Hey! How did I get on this list!? xD
[BANNED] Player 76561197995940642 TheUnknown has has been banned for hacking by anticheat.
2020-07-21T07:34:23 4279.980 INF ~Botman AntiCheat~ --NAME:TheUnknown --ID:76561197995940642 --LVL:1000 has entered god mode.
[BANNED] Player 76561199071889738 92045542p has has been banned for hacking by anticheat.
2020-07-23T15:10:29 13060.531 INF ~Botman AntiCheat~ --NAME:92045542p --ID:76561199071889738 --LVL:1000 has entered spectator mode.
ALERT! Unauthorised admin detected. Player zephire Steam: 76561198033188949 Permission level: 1000 has entered spectator mode.
Day 364, 12:12 [BANNED] Player 76561198033188949 zephire has been banned for 10 years hacking
New player joined
2017-04-09T10:52:50 22909.089 INF Player connected entityid=880101 name=Amyn steamid=76561198099878201 steamOwner=76561198099878201 ip=::ffff:147.30.36.178
Player 76561198099878201 Amyn detected noclipping -305 49 4152
base protection triggered for base1 of Fronti 76561197965416927 against Amyn 76561198099878201
Player 76561198099878201 Amyn detected noclipping -321 50 4172
Player 76561198099878201 Amyn detected noclipping -357 25 4184
Amyn has been sent to exile, detected near Fronti with a non-zero hacker score.
2017-04-09T11:05:05 Player 880101 76561198099878201 name: Amyn detected teleporting to -409 180 6201 distance 7447
[BANNED] Player 76561198099878201 Amyn has been banned for 1 day We detected unusual teleporting from you and are investigating the circumstances
Day 719, 16:56 76561198191946651 Mr. Bean connected
### New player joined Mr. Bean steam: 76561198191946651 owner: 76561198191946651 id: 153655 ###
Day 719, 16:56 Smegz0r: hi there! I'm editing our server manager atm so commands aren't working temporarily
2016-06-29T01:09:04 Player 153655 name: Mr. Bean detected teleporting to -124 180 339 distance 844.9906626703
Player Mr. Bean banned. Detected proxy DCSMANAGE.COM
[BANNED] Player 76561198191946651 Mr. Bean has been banned for 10 years Banned proxy
Day 719, 17:20 76561198191946651 Mr. Bean disconnected
[TIMEOUT] Player 76561198191946651 Mr. Bean has been sent to timeout for excessive inventory for a new player 762mmBullet(500)
Day 719, 17:44 Server: Sending player Mr. Bean to timeout for excessive inventory for a new player 762mmBullet(500)
Day 719, 17:44 76561198191946651 Mr. Bean disconnected
Day 719, 17:44 Smegz0r: heh hacker
New player joined
2016-08-07T17:56:50 237987.722 INF Player connected entityid=207337 name=zlul steamid=76561198159583989 steamOwner=76561198159583989 ip=166.175.57.21
2016-08-07T17:59:49 Player 207337 name: zlul detected teleporting to -2305 180 6381 distance 4433.5008841772
2016-08-07T18:06:12 Player 207337 name: zlul detected teleporting to -1592 106 1980 distance 4515.0417163078
[BANNED] Player 76561198159583989 zlul has been banned for 1 day We detected unusual teleporting from you and are investigating the circumstances.
***** DarthmanZan at position -2197 62 6441 said: possible hacker destroyed all our chests and forges
***** Silentwolfe at position -2198 63 6437 said: i just witnessed a possible hacker destory all of mine and my firend's chests. person had to have been invisable aswell
[BANNED] Player 76561198159583989 zlul has been banned for 10 years blacklisted
New player joined
2016-08-04T18:54:02 754171.162 INF Player connected entityid=198206 name=King Inioch steamid=76561198149242780 steamOwner=76561198149242780 ip=208.96.112.54
[TIMEOUT] Player 76561198149242780 King Inioch has been sent to timeout for excessive inventory for a new player 762mmBullet(500)
Moving player 76561198149242780 King Inioch to exile for excessive inventory for a new player rocket(100).
Player 76561198149242780 King Inioch detected flying (1) -6682 180 6641
2016-08-04T23:33:56 Player 198206 name: King Inioch detected teleporting to -2209 60 6444 distance 4883.2662030653
[BANNED] Player 76561198149242780 King Inioch has been banned for 1 day We detected unusual teleporting from you and are investigating the circumstances.
Here is a more unusual one taken from 2 of the bot's IRC channels. In this instance the bot was new to an established server with a bad hacker problem. This player isn't necessarily one of the hackers but he is a Chinese player using a proxy to appear as another country.
The main IRC channel:
Day 168, 22:29 76561198368104599 Babcock connected
Player Babcock's new player status has been removed because their level is 25
Chinese IP detected. Babcock 80.239.207.21
Chinese player Babcock banned.
[BANNED] Player 76561198368104599 Babcock has been banned for 10 years blacklisted
Added new Chinese IP range 80.239.207.0 - 80.239.207.31 to blacklist
Day 168, 22:55 76561198368104599 Babcock disconnected
The alerts IRC channel:
Possible proxy detected! Country changed! 76561198368104599 Babcock 80.239.207.21 old country EU new CN
Chinese IP detected. Babcock 80.239.207.21
Chinese player Babcock banned.
[BANNED] Player 76561198368104599 Babcock has been banned for 10 years blacklisted
The bot's new global ban list has banned its first hacker..
[BANNED] Player 76561198026088898 JMK9718 has been banned for 10 years On global ban list
Here is an example of a companion ban. If several players share the same IP and one of them hacks, all in-game players with that IP are banned. Also if a player is using a family key and gets banned, the master key is banned too.
Player connected entityid=131362 name=langlang steamid=76561198193701694 steamOwner=76561198193701694 ip=::ffff:107.6.38.67
Player 131362 76561198193701694 name: langlang detected teleporting to 1579 0 495 distance 1046
[BANNED] Player 76561198193701694 langlang has been banned for 1 week We detected unusual teleporting from you and are investigating the circumstances.
[BANNED] Player 76561198225068096 Friget has been banned for 1 week same IP as banned player
This one is too funny not to share xD (he's getting added to the bot's global ban list)
2018-03-12T16:23:27; Server; 76561198433000620 pixle_gaming connected
2018-03-12T16:27:08; [name removed]; Day 1245, 02:13 [name removed]: you still here
2018-03-12T16:27:14; pixle_gaming; Day 1245, 02:13 pixle_gaming: yep
2018-03-12T16:27:20; [name removed]; Day 1245, 02:20 [name removed]: l;ol
2018-03-12T16:27:20; [name removed]; Day 1245, 02:20 [name removed]: where
2018-03-12T16:27:26; pixle_gaming; Day 1245, 02:20 pixle_gaming: same place
2018-03-12T16:27:35; pixle_gaming; Day 1245, 02:27 pixle_gaming: made you a ladder from bot to top
2018-03-12T16:27:41; pixle_gaming; Day 1245, 02:27 pixle_gaming: wanna team now?
2018-03-12T16:27:44; [name removed]; Day 1245, 02:34 [name removed]: how u did that
2018-03-12T16:28:29; [name removed]; Day 1245, 02:55 [name removed]: lol]
2018-03-12T16:29:05; [name removed]; Day 1245, 03:10 [name removed]: how u do taht
2018-03-12T16:29:14; pixle_gaming; Day 1245, 03:10 pixle_gaming: im developer
2018-03-12T16:29:23; [name removed]; Day 1245, 03:17 [name removed]: lol\
2018-03-12T16:29:35; [name removed]; Day 1245, 03:24 [name removed]: you admin for this server
2018-03-12T16:36:18; [name removed]; Day 1245, 06:33 [name removed]: lol
2018-03-12T16:39:15; pixle_gaming; Day 1245, 07:49 pixle_gaming: lol
2018-03-12T16:39:21; pixle_gaming; Day 1245, 07:56 pixle_gaming: [CENSORED].com
2018-03-12T16:39:39; pixle_gaming; Day 1245, 08:03 pixle_gaming: all developer priveledges
2018-03-12T16:40:49; Server; Day 1245, 08:39 Server: Temp banning pixle_gaming 1 week for unexplained teleporting. An admin will investigate the circumstances.
2018-03-12T16:40:50; Server; 76561198433000620 pixle_gaming disconnected