AC 1.1 _obvious_ cases of cheat

[Brahma]

Please... do not post in this thread if you are not 150% sure.
Do not post offenses, impersonation, subtle cheats or things that can be explained by lag.

//name: Penis
//reason: cheating
//proof: http://ac.if.usp.br/bl/farknife-8min-Penis.dmo
//map: http://ac.if.usp.br/rank/maps/ac_sludge.tgz
//comment: 70.118.0.0/19 !do not ban the range!
70.118.28.133

//name: NAWP
//reason: helping in test the cheats
//comment: 93.137.32.0/19 !do not ban the range!
93.137.38.222

[Brahma]

//name: Rob
//reason: cheating
//proof: http://ac.if.usp.br/bl/rob.dmo
//map: http://ac.if.usp.br/rank/maps/ac_sludge.tgz
99.50.215.154

[samsattF]

[SELECT ALL] Code:

//Date: 16/08/2010
//name: AssaultCuban
//reason: cheating
//proof:demo: http://www.mediafire.com/?5xp6r8v1jfwsaer
//screenshot: http://a.imageshack.us/img291/6452/20100815203637acgothick.jpg
//map: ac_gothic
99.226.187.45

autokicked after ~2 mn

Mod edit: completed IP. Googling this IP and the one above shows that they are both heavily banned in other games.

[Brett]

Non-contributing post by non-contributing poster is non-contributing.

[NUCKChorris]

//name: Ju
//speed hack / ban evader
//server: hi-skill 1.1 server
//proof - demo and screenshot of ip : http://www.mediafire.com/?b8n8o8ujwv958
//ip was dynamic, kept reconnecting, but i have his first one
//other ip's he connected with started with 201.9 also

201.9.54.86

[Medusa]

I always wanted to say this..

You're wrong Shorty! :P
Unless.. Feng moved from NZ to Brazil

[cdarkness]

//Name: C4rU$_3m aka |"em0,,C4rU$_3m , |"CF,,C4rU$ , *F]1#|100%GeeK*,
//*F]1#^HeyMily^ , *F]1#C4rU$_3m ,
//Ban reason: Aimbot, racism, ban evasion, triggerbot, wallhack .... etc.
//Comment: I think the older members of the community should know Geek (C4rU$) (Dont trust him!!!)
//Ban date: 2010-18-9
//IP:

79.82.86.0/24
91.172.0.173/32
91.172.1.0/16
91.172.7.176/32
92.128.110.103
91.172.2.196
83.197.40.106
92.75.192.0/19
188.104.128.0/19
188.110.96.0/20


//Proof: http://img408.imageshack.us/i/spinhack.png/ - I think I dont need other proofs

Pls ban this guy forever and nick/Ip blacklist him as soon as possible. He is the most evil person I've ever met.

[#M|A#Wolf]

[SELECT ALL] Code:

Name: |1UP|Biel (impersonator)
Reason: Speedhack
IP: [ 201.9.77.32 ] http://i55.tinypic.com/35mmjht.jpg <-- Screenshot
Proof: http://www.mediafire.com/?el4yi6e5iu4e5b7 <-- Demo
Comment: I was using the alias of "Plotman"

[Brahma]

Look out... 1UP|Bieel is from the ranges: 189.19, 187.34, 187.56...

The 201.9 guy is not him (say hi to connex 1.1).

Also I identified at least 10 guys from the range 201.9 that *are not* connex.
Between them we have:

Jessy
DAkel
MCNNM|Impaler
{SwaT}#Carlos
Capitaodomato
RodolfoBR
SouMau
(and some unarmeds)

I will whitelist all these guys, and blacklist the 201.9 range.

[Mr.Floppy]

//name: asdf
//hack: looking/firing through walls
//server: BC|Maximus
//IP: 212.186.175.210
//proof: http://parsor.vs120101.hl-users.com/mist...k_asdf.zip

He enters at about 5 mins remaining. Updated IP

[Panda]

99.230.173.70 //unarmed - speedhack and I think tries to shoot/walk through walls http://www.ac-news.tk/HTF_ac_gothic_2010.10.15_0945.zip

[ElCrema]

//Name: imurd4ddy
//Reason: weapon hack
//Proof: Logs here and demos here and here
84.62.148.240

____________________________

Thanks pwnage for the logs

[OpenSource]

[SELECT ALL] Code:

// Name: Thimo
// Ban date: November 15 2010
// Ban reason: Speedhack and unlimited nadas
// Server: {TyD}Pennywise
// Proof demo: http://www.mediafire.com/?ssfauh7nztsxe91
84.56.65.13

Demo Connects at time remaining: 2 minutes

Log from Pennywise:

[SELECT ALL] Code:

Nov 15 16:21:31 AssaultCube[Pennywise]: [84.56.65.13] Thimo logged in (default), AC: 1103|840
Nov 15 16:21:37 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 35 [anticheat]
Nov 15 16:21:46 AssaultCube[Pennywise]: 10 Thimo            RVSF    0     -4    0     1  0  189 normal  84.56.65.13
Nov 15 16:22:03 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 30 [anticheat]
Nov 15 16:22:05 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 26 [anticheat]
Nov 15 16:22:10 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 24 [anticheat]
Nov 15 16:22:10 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 21 [anticheat]
Nov 15 16:22:10 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 22 [anticheat]
Nov 15 16:22:10 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 22 [anticheat]
Nov 15 16:22:10 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 24 [anticheat]
Nov 15 16:22:11 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 21 [anticheat]
Nov 15 16:22:11 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 22 [anticheat]
Nov 15 16:22:11 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 22 [anticheat]
Nov 15 16:22:11 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 19 [anticheat]
Nov 15 16:22:11 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 20 [anticheat]
Nov 15 16:22:11 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 20 [anticheat]
Nov 15 16:22:11 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 18 [anticheat]
Nov 15 16:22:12 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 21 [anticheat]
Nov 15 16:22:12 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 23 [anticheat]
Nov 15 16:22:12 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 23 [anticheat]
Nov 15 16:22:12 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 20 [anticheat]
Nov 15 16:22:13 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 22 [anticheat]
Nov 15 16:22:13 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 23 [anticheat]
Nov 15 16:22:13 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 20 [anticheat]
Nov 15 16:22:13 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 21 [anticheat]
Nov 15 16:22:13 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 23 [anticheat]
Nov 15 16:22:14 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 20 [anticheat]
Nov 15 16:22:14 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 22 [anticheat]
Nov 15 16:22:14 AssaultCube[Pennywise]: [84.56.65.13] Thimo tried to pick up entity #308 (ammobox), distance 29.23 (1)
Nov 15 16:22:14 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 21 [anticheat]
Nov 15 16:22:15 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 23 [anticheat]
Nov 15 16:22:15 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 23 [anticheat]
Nov 15 16:22:32 AssaultCube[Pennywise]: [84.56.65.13] Thimo tried to pick up entity #363 (pistol), distance 31.90 (2)
Nov 15 16:22:46 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 23 [anticheat]
Nov 15 16:22:46 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 25 [anticheat]
Nov 15 16:22:46 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 26 [anticheat]
Nov 15 16:22:46 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 25 [anticheat]
Nov 15 16:22:46 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 23 [anticheat]
Nov 15 16:22:46 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 25 [anticheat]
Nov 15 16:22:46 AssaultCube[Pennywise]: 10 Thimo            RVSF    0     20    0     2  0  185 normal  84.56.65.13
Nov 15 16:22:47 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 24 [anticheat]
Nov 15 16:22:47 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 25 [anticheat]
Nov 15 16:22:47 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 22 [anticheat]
Nov 15 16:22:47 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 26 [anticheat]
Nov 15 16:22:47 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 26 [anticheat]
Nov 15 16:22:48 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 24 [anticheat]
Nov 15 16:22:48 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 26 [anticheat]
Nov 15 16:22:48 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 22 [anticheat]
Nov 15 16:22:48 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 26 [anticheat]
Nov 15 16:22:49 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 23 [anticheat]
Nov 15 16:22:49 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 24 [anticheat]
Nov 15 16:22:49 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 21 [anticheat]
Nov 15 16:22:49 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 22 [anticheat]
Nov 15 16:22:49 AssaultCube[Pennywise]: [84.56.65.13] Thimo fast burst subgun 25 [anticheat]
Nov 15 16:22:57 AssaultCube[Pennywise]: [x.x.x.x] client MoToR_BrEaTH called a vote: kick player Thimo, reason: hacker\
Nov 15 16:23:05 AssaultCube[Pennywise]: [84.56.65.13] disconnected client Thimo cn 10, 94 seconds played, score saved

Log from Hi-Skill:

[SELECT ALL] Code:

Nov 15 14:53:17 : [84.56.65.13] Thimo fast move [anticheat]
Nov 15 14:54:04 : [84.56.65.13] Thimo fast move [anticheat]
Nov 15 14:54:05 : [84.56.65.13] Thimo fast move [anticheat]
Nov 15 14:54:05 : [84.56.65.13] Thimo speedhack [anticheat]
Nov 15 14:54:05 : [84.56.65.13] disconnecting client Thimo (auto-kick - abnormal client behavior detected) cn 7, 510 seconds played, score saved

[jamz]

[SELECT ALL] Code:

// Name: Agustin, aka Augie
// Ban date: 2010-11-06
// Ban reason: Infinite nades and speedhack
// Proof: http://www.mediafire.com/?zk5spk2urlghyra
68.52.161.77
71.228.213.222

These IPs are same person; it changed recently and could be a lot more dynamic. Joins after a little while :) Link to demo.

Nov 13 06:37:27: [71.228.213.222] disconnecting client Agustin (auto-kick - abnormal client behavior detected) cn 1, 310 seconds played, score saved

[68.52.161.77] Agustin says: 'lol wanna learn how to hack?'
[68.52.161.77] Agustin says: 'the nades dont hurt u'
[68.52.161.77] Agustin says to team RVSF: 'can you keep a secret?'
[68.52.161.77] Agustin says to team RVSF: 'i speedhacked to 30% faster'
[68.52.161.77] disconnecting client Agustin (auto-kick - abnormal client behavior detected)

[GeneralDisarray]

// name: armed
// reason: rather obvious aimbot
// server: Godsmack's server
// proof: http://www.mediafire.com/?xrl2j4udl1u18xr
// date: 19-11-2010

68.55.46.147

[GeneralDisarray]

// name: Fraco
// reason: speedhack
// server: BCFH Arena
// proof: http://www.mediafire.com/?z8p5gsh12bp8838
// date: 26-11-2010

187.79.12.201

[jamz]

[SELECT ALL] Code:

// Name: [Legion]Yuri<3, aka [Legion]:Titan:
// Ban date: 2010-12-04
// Ban reason: modified hitbox
// Proof: http://www.26things.com/ac/forum/NZ-Kiwi-CTF_ac_shine_2010.12.02_0644.dmo
115.64.177.178

Joins about 1 minute in. Link to demo.

edit: Now with added video!

[jamz]

[SELECT ALL] Code:

// Name: Squalo, aka ~KAS~Vlper, ~KAS~Belphegor
// Ban date: 2010-12-07
// Ban reason: modified hitbox
// Proof: http://www.26things.com/ac/forum/NZ-Kiwi-TDM_ac_snow_2010.12.02_0819.dmo
122.108.0.180

Link to demo. There is also ~KAS~KillerBro, aka KillerAssasin and (possibly another person) ~KAS~SNOWMAN on this IP address. It looks like Vlper was the only cheat.

[Jomattix]

//Name: w00t
//Ban Reason: gib cheat
//Server: *rage* GODSPEED by armed |public|
//Proof demo and screenshot: Screenshot
//Ban Date:11 ‎December ‎2010 08:32 UTC/GMT +11 hours
IP: 92.68.161.x

I did try to download demo, however for some reason the file corrupted.
This was on ac_desert and knife gib all enemy on spawn hopefully the server operator can confirm this via their logs.

[jamz]

[SELECT ALL] Code:

// Name: 100%Headshots
// Ban date: 2010-12-13
// Ban reason: modified hitbox
// Proof: http://www.26things.com/ac/forum/magnetoCTF_ac_power_2010.12.13_0215.dmo
121.208.250.162

Link to demo. Joins with 7 minutes remaining.

---

---

[SELECT ALL] Code:

// Name: "=Lexus=", aka ~FEL~*CENTINELA, ~ToNy_ToRmEnTa~
// Ban date: 2010-12-13
// Ban reason: modified hitbox
// Proof: http://www.26things.com/ac/forum/hazelwood_CTF_ac_power_2010.12.10_2334.dmo
189.143.22.0 - 189.143.37.255
189.143.111.0 - 189.143.114.255
189.143.188.0 - 189.143.193.255
201.102.18.0 - 201.102.30.255
201.102.62.0 - 201.102.79.255

Link to demo. In this demo, "=Lexus=" fires 61 shots with the sniper. He misses 43 of them, and of the 18 that hit, 17 are headshots.
Proof that it's CENTINELA:
"=Lexus=" connecting for that game:

[SELECT ALL] Code:

Dec 10 23:18:30 AssaultCube[Hazelwood]: [201.102.78.252] "=LexuS=" logged in (default), AC: 1104|824

Earlier on:

[SELECT ALL] Code:

Dec 10 22:50:19 AssaultCube[Hazelwood]: [201.102.78.252] ~FEL~*CENTINELA logged in (default), AC: 1103|824

...and after...

[SELECT ALL] Code:

Dec 11 01:12:54 AssaultCube[Hazelwood]: [201.102.78.252] ~FEL~*CENTINELA logged in (default), AC: 1103|824

He switches from 1.1.0.3 (CENTINELA's usual client) to 1.1.0.4, then back.
As far as I can tell, CENTINELA started using this client on Nov 29, but not all the time. Here are some of his entries from Hi-Skill logs for that day, showing the client changes:

[SELECT ALL] Code:

Nov 29 00:39:20 : [201.102.79.233] ~FEL~*CENTINELA logged in (default), AC: 1103|824
Nov 29 00:54:58 : [201.102.79.233] ~FEL~*CENTINELA logged in (default), AC: 1103|824
Nov 29 02:14:17 : [201.102.79.233] ~FEL~*CENTINELA logged in (default), AC: 1104|824
Nov 29 04:40:17 : [201.102.79.233] ~FEL~*CENTINELA logged in (default), AC: 1103|824
Nov 29 05:44:04 : [201.102.79.233] ~FEL~*CENTINELA logged in (default), AC: 1104|824
Nov 29 18:03:38 : [189.143.112.124] "=LexuS=" logged in (default), AC: 1104|824
Nov 29 20:24:37 : [189.143.112.124] unarmed logged in (default), AC: 1103|824
Nov 29 20:26:17 : [189.143.112.124] unarmed logged in (default), AC: 1104|824
Nov 29 21:19:03 : [189.143.112.124] ~FEL~*CENTINELA logged in (default), AC: 1103|824
Nov 29 21:22:36 : [189.143.112.124] ~FEL~*CENTINELA logged in (default), AC: 1104|824
Nov 29 21:50:17 : [189.143.112.124] ~FEL~*CENTINELA logged in (default), AC: 1103|824
Nov 29 22:58:35 : [189.143.112.124] ~FEL~*CENTINELA logged in (default), AC: 1104|824
Nov 29 23:18:20 : [189.143.112.124] ~FEL~*CENTINELA logged in (default), AC: 1103|824
Nov 29 23:35:38 : [189.143.112.124] "=LexuS=" logged in (default), AC: 1104|824

[Medusa]

[SELECT ALL] Code:

//Name: benochite
//Ban Reason: speedhack
//Server: TyD|Playground
//Proof:  http://www.mediafire.com/file/c2j4bpe27d6ddct/CTF_ac_aqueous_2010.12.15_1454.dmo
//Ban Date: 20101215, 11:56 gmt
93.27.224.77

Demo benochite connects at 4 min. remaining

[V-Man]

// Name: unarmed
// Reason: speedhack (Makes the server think it's lag)
// Server: {TyD}Beacon
// Evidence: Link to demo
// Date:12-16-2010
// IP:
125.161.145.x

[GeneralDisarray]

// Name: sw1ft
// Reason: speedhack
// Server: {TyD}Champagne
// Evidence: http://www.mediafire.com/?tdy2erutpfjm62g
// Joins after 7 minutes remaining. ;-)
// Date: 17-12-2010
// IP:
188.100.233.148

[Jomattix]

[SELECT ALL] Code:

//name: EZheadshot
//hack: modified hitbox
//server: Exodus TOSOK
//IP: 121.217.132.229
//map: ac_douze
//Screenshot: [url]http://www.mediafire.com/i/?mlhd5nybg5fhxf0[/url]
//Demo: [url]http://www.mediafire.com/?sex12kflg5nnjh2[/url]
//Date: 24/12/2010 AEST

Joins after 10 min, stupidly makes remark about hacks which draws my attention.

[No1sPerfect]

// Name: EZheadshot
// Reason: Headshot hack
// Server: Ninja'Style :: TDM #2
// Evidence:
1) screenshot of name,ip and server: http://img193.imageshack.us/i/2010122409...uzetd.jpg/
2)demo: http://www.mediafire.com/?igywgiq65bf3eeg
// Date:24/12/2010
// IP:121.217.132.x

P.S: the1 who jomattix reported (above my post :) )

[jamz]

[SELECT ALL] Code:

// Name: {FTW}Sine, known as Sine with many different tags (|*BDA*|, |NOD|, \WuT/, *rAgE*, |ELITE|), aka smielyface
// Ban date: 2011-01-01
// Ban reason: Hitbox modification, possibly aimbot, but the lag makes it hard to tell
// Proof: http://www.26things.com/ac/forum/justice_TDM_ac_fold_2010.12.19_1641.dmo
89.241.224.0/20

Link to demo. Another (innocent) player called LadyGaga falls right in this IP range too.

Edit: I deleted the posts below. Just to confirm, Sine was never in \WuT/ or *rAgE*, so please don't take any of the clan tags as a sign of this player being involved with that clan, or vice versa.

[Yarukinasu]

[SELECT ALL] Code:

// name: TacticalNuke
// date: January 9th, 2011
// reason: Gibbing and knifing without in the range of a player
// server: |FOX|Yarukinasu sucks 70.173.135.151
// http://ompldr.org/vNngxcw/20110109_20.04.16_ac_iceroad_CTF.jpg
// http://ompldr.org/vNngxdA/CTF_ac_iceroad_2011.01.09_1209.dmo
81.94.177.10

[jamz]

[SELECT ALL] Code:

// Name: xdfcgte, aka CyBerRaSer
// Ban date: 2010-01-13
// Ban reason: speedhack
// Proof: http://www.26things.com/ac/forum/justice_CTF_ac_power_2011.01.13_2156.dmo
85.171.220.252
89.159.181.246

Joins around 4 minutes remaining. Link to demo.

[SELECT ALL] Code:

Jan 13 21:54:02: [] Me&you says: 'thats a speed hack?'
Jan 13 21:54:08: [85.171.220.252] xdfcgte says: 'yes'

edit: Apologies to the posters who were below, but this thread is for reports of "...150% sure..." cheats ONLY.

[Yarukinasu]

[SELECT ALL] Code:

// name: BOOM!Headshot!
// date: January 24th, 2011
// reason: Modified hitbox
// server: |FOX|Yarukinasu sucks 70.173.135.151:28763
// http://ompldr.org/vNzUwbA/20110125_00.11.29_ac_culvert_CTF.png
// http://ompldr.org/vNzUwbQ/TDM_rifle@camperX1_2011.01.24_1611.dmo
76.115.224.224

[jamz]

[SELECT ALL] Code:

// Name: SHAKERX
// Ban date: 2011-01-26
// Ban reason: hitbox modification
// Proof: http://www.26things.com/ac/forum/CTF_ac_mines_2011.01.26_0003.dmo
178.128.52.190

Link to demo. This IP is almost certainly dynamic.