Welcome, Guest. Please login or register.
Did you miss your activation email?

November 14, 2018, 05:56:33 PM
Show unread posts since last visit.

Home | Help | Search | Login | Register

Pages: [1]
Print
Author Topic: Cheat Detected: thesnake, Cipa-nie-dziala, NoName  (Read 14319 times)
jitspoe
Administrator
Autococker

Posts: 18593

« on: August 06, 2008, 06:00:01 PM »

Name used: Cipa-nie-dziala

IP: 85.14.84.6 = mirasoft-r.3s.pl

Cheat: ZGH

ID's matching IP:
72940   Tomcio
61159   [ETP]KLOMAR
59198   [ePL]WEZYK
12607   baty

Looks like it might be a shared IP, so I'm not sure which, if any, of these players was actually cheating.
Logged
Okles
PGP

Posts: 7

« Reply #1 on: August 08, 2008, 03:45:27 AM »

Dammit, I hope Wezyk wasn't cheating, it's my clanmate and if he was cheating, he'll be deleted from the clan.
Logged
iced
68 Carbine

Posts: 354

« Reply #2 on: August 08, 2008, 01:45:22 PM »

Name used: Cipa-nie-dziala

IP: 85.14.84.6 = mirasoft-r.3s.pl

Cheat: ZGH

ID's matching IP:
72940   Tomcio
61159   [ETP]KLOMAR
59198   [ePL]WEZYK
12607   baty

Looks like it might be a shared IP, so I'm not sure which, if any, of these players was actually cheating.

if your not sure why ban them?
Logged
jitspoe
Administrator
Autococker

Posts: 18593

« Reply #3 on: August 08, 2008, 04:08:16 PM »

I simply listed all of the login ID's that were associated with that IP address.
Logged
theSYNDIKATE
VM-68

Posts: 149

« Reply #4 on: August 09, 2008, 02:26:18 PM »

Wow I thought he was good.
Logged
Okles
PGP

Posts: 7

« Reply #5 on: August 10, 2008, 05:42:24 AM »

So what about this Wezyk?? U don't have any evidences, continue investigation when u have evidences.
Logged
Laged
68 Carbine

Posts: 374

« Reply #6 on: August 10, 2008, 06:15:57 AM »

Uh, ZGH is detected when used, proof enough?
Logged
theSYNDIKATE
VM-68

Posts: 149

« Reply #7 on: August 11, 2008, 10:57:40 AM »

So what about this Wezyk?? U don't have any evidences, continue investigation when u have evidences.

The evidence is the trace of the ZGH hack being used.
Logged
jitspoe
Administrator
Autococker

Posts: 18593

« Reply #8 on: January 10, 2009, 10:22:41 PM »

Name used: NoName

IPs:
5.83.19.110 = 5.83.19.110
172.16.2.85 = 172.16.2.85
85.14.95.36 = host85149536.mirasoft.3s.pl

Cheats:
ZGH
Modified client executable

ID matching IP: 59198   thesnake
« Last Edit: January 28, 2009, 09:29:57 AM by jitspoe » Logged
KnacK
Global Moderator
Autococker

Posts: 3035

« Reply #9 on: January 10, 2009, 10:34:54 PM »

Very interesting...
Code:
IP address:                     5.83.19.110
Reverse DNS:                    [No reverse DNS entry per a.root-servers.net.]
Reverse DNS authenticity:       [Unknown]
ASN:                            0
ASN Name:                       IANA-RSVD-0
IP range connectivity:          0
Registrar (per ASN):            Unknown
Country (per IP registrar):     *R [[IANA Reserved]]
Country Currency:               Unknown
Country IP Range:               5.0.0.0 to 5.255.255.255
Country fraud profile:          Normal
City (per outside source):      Unknown
Country (per outside source):   -- []
Private (internal) IP?          Yes
IP address registrar:           whois.arin.net
Known Proxy?                    No

It appears to be a reserved ip address block.
Logged
jitspoe
Administrator
Autococker

Posts: 18593

« Reply #10 on: January 10, 2009, 11:49:30 PM »

Reserved for cheaters?

What about this one? 172.16.2.85
Logged
KnacK
Global Moderator
Autococker

Posts: 3035

« Reply #11 on: January 11, 2009, 08:24:14 AM »

172.16.x.x is reserved for private networks and is not used n the public domain. See my "other" post
Logged
y00tz
Global Moderator
Autococker

Posts: 2742

« Reply #12 on: January 11, 2009, 08:27:35 AM »

My "other" post said it first Tongue
Logged
KnacK
Global Moderator
Autococker

Posts: 3035

« Reply #13 on: January 11, 2009, 08:46:08 AM »

Logged
DrRickDaglessMD
68 Carbine

Posts: 376

« Reply #14 on: January 11, 2009, 12:49:53 PM »

5.x.x.x is commonly used by LogMeIn's Hamachi zero-config VPN software.

https://secure.logmein.com/products/hamachi/vpn.asp?lang=en

great product.

- Dag
Logged
jitspoe
Administrator
Autococker

Posts: 18593

« Reply #15 on: January 13, 2009, 08:16:08 PM »

Yeah, I've used Hamachi, and while sometimes the cheat detection does pick up cheats used on a LAN (if the LAN server is public), it doesn't make sense that those IP's would also be in the DPLogin system, which is only accessible via the Internet.
Logged
jitspoe
Administrator
Autococker

Posts: 18593

« Reply #16 on: January 24, 2009, 10:59:39 PM »

I must have misread something.  The server was actually running on 85.14.95.36, and somebody was connected to the server via LAN (or Hamachi).  When he connected to another server, it showed the 85.14.95.36.  He didn't actually log directly in using the 5. or 172. ip.
Logged
wolfshadow
PGP

Posts: 3

« Reply #17 on: January 27, 2009, 02:25:06 AM »

Maybe i can talk more about TheSnake.
TheSnake = wezyk
Look on this: http://dplogin.com/forums/index.php?topic=14502.0

Next on this google cache (source thread deleted):
http://74.125.77.132/search?q=cache:of-GWViSnXMJ:cs-hacked.socjum.pl/fora/cs-hacked/viewtopic.php%3Fp%3D168557+thesnake+cs+quake&hl=en&ct=clnk&cd=3&client=opera

Translation:
Quote
TheSnake (7.11.2008)
Hello. I have the code of the game, Quake 2 - Digital Paintball 2 (C + +  ) And looking for someone who change it per x money and compile to have acted Wall-hack. Now I say that none ZGH HACK-old can not be because it is made on build 16, and servers can be connect from 20 +. I tried to change in the XVI32 this build in exe but not work. We ask you to help.

tinmar0 (9.11.2008)
Give me the code on PM i look on this
sorry for my poor english

« Last Edit: January 27, 2009, 03:08:19 AM by wolfshadow » Logged
jitspoe
Administrator
Autococker

Posts: 18593

« Reply #18 on: January 28, 2009, 09:43:09 AM »

Thanks for the information.  I've merged these threads and increased the ban time.
Logged
Pages: [1]
Print
Show unread posts since last visit.
Jump to:  


Powered by SMF 1.1.20 | SMF © 2013, Simple Machines