3/3 US Banned: Hand Levelled, VM+VP* each, Randomized Delays, Champion Farming, <12hr

[mephuser1000]

-> This is my 2nd round of bans.

-> These 3 accounts are US CD-Keys (Physical box purchased from 3 different shops).

-> Each account is run from a different VM using a different US State IP. IPs are dynamic at the final octet.(no control over IP change)

-> VMs were freshly created from scratch and Diablo 3 installed (not copied over)

-> I have taken careful precautions that in the event that the VP* disconnects, each bot will have its Internet connection disabled, so that it won't rollback onto the local Non-VP* IP.

-> These 3 accounts were hand-levelled to Level 60, no public games joined, no public chat channel joined, no quests skipped, progress until Act 2 Inferno Belial quest, no levelling using ZK, Belial, Azmos exploits.

-> These 3 accounts had >1,500 achievement points

-> These 3 accounts only started botting at Level 60 on 21st Jul, the day that "Demonbuddy with randomised delays" was released.

1)Were you using DemonBuddy on the account at the same time the ban/suspension occurred? (Kicked offline due to being Banned)
No

2)If not, when was the last time?:
12 hours ago.

3)If using a public profile please name it here:
- 5avage [A1 - Inferno] Champion Hunting (21st Jul to 25th Jul)
- Radonic [A1 - Inferno] Champion-Hunting (25th Jul until now)

4)What combat class were you using? if None Just put Default then the Classname:
Edited Belphegor for DH-Tanking

5)What plugins are you using?:
DeathFix

5.5) Reloggers?
Each Bot/VM using a different one (because I won't know which developer is going to quit):
Teivovo's DB_Run
AGB Relog
Gawdz's DBRelogger

6)How many hours per day did you bot for?:
<12 hrs (Will stop Relogger + bot manually after 12hrs of runtime including breaktime). Depending on which relogger. Randomized 30min to 1hr profile runtime + 30min to 1hr breaktime.

6.5)What honest percentage of time did you supervise your bot?
10% or less.

7)How many auctions per day did you have?:
0

7.5) Did you use the Real Money Auction House (RMAH)?
no

8)Did you Use Any Other Bots, Hacks, Mods, or Exploits?
no

9)Was your account involved in gold selling?
no

10)What server region where you connected to (The Americas, Europe or Asia)?
US

11) Were you using VMs, VP*?
Yes, each on different VM and VP*.

meph thanks for the info. I do appreciate it and i'm sure others do too. Any ideas on how they linked your accounts?

Did you
- use the same payment info?
- sign up for them on the same day?
- join games together to your main to exchange gear etc?

anything else?

I'm currently running 8 bots in seperate vms isolated (and hiding vmware too). Went to the extremes to keep them unrelated, different gateway MAC addresses, different public IPs, different payment methods/info, never joined each others games, different profiles etc.. i'm trying to avoid a chain ban, i don't mind if one or two get hit.The more info we can get on how they chain ban the better.

Did you
- use the same payment info?
Ans: Zero payment info. Physical Boxed copies.

- sign up for them on the same day?
Ans: Different days but within the same week. Each reached Level 60 on different weeks. Had too much time before Demonbuddy came out. These accounts are my final batch of legitimate loner(no public chat/games) hand-levelled accounts

- join games together to your main to exchange gear etc?
Ans: Main -> passes gear to Non-botted trade account. Non-botted trade account passes gear to Bot account.
Trade account doesn't come into contact with public players and doesn't sell gold.
Trade account has a Level 10 char that killed Skeleton King.

anything else?
Ans: Vm-hiding with the following:
isolation.tools.getPtrLocation.disable = "TRUE"
isolation.tools.setPtrLocation.disable = "TRUE"
isolation.tools.setVersion.disable = "TRUE"
isolation.tools.getVersion.disable = "TRUE"
monitor_control.disable_directexec = "TRUE"
monitor_control.disable_chksimd = "TRUE"
monitor_control.disable_ntreloc = "TRUE"
monitor_control.disable_selfmod = "TRUE"
monitor_control.disable_reloc = "TRUE"
monitor_control.disable_btinout = "TRUE"
monitor_control.disable_btmemspace = "TRUE"
monitor_control.disable_btpriv = "TRUE"
monitor_control.disable_btseg = "TRUE"
monitor_control.restrict_backdoor = "TRUE"
isolation.tools.copy.disable = "TRUE"
isolation.tools.dnd.disable = "TRUE"
isolation.tools.paste.disable = "TRUE"

 

[ezpwnd]

guess we are doomed.

 

[thekingkong]

yep...blizzard blind sided us

 

[BBD90]

How can they ban for Champion farming? Those games are like 35 minutes long and the guy gets sidetracked like 10 times in one walk through.

FML.

 

[ezpwnd]

How can they ban for Champion farming? Those games are like 35 minutes long and the guy gets sidetracked like 10 times in one walk through.

FML.

well.. if op is talking truth and more ppl get hit for using a1 profile we will have to put into consideration that db could simply be detected.

 

[Momentusa]

Op might just have gotten very unlucky or missed something. E.G HWID, but it doesn't look like it.
Unlucky mate >.<.

 

[cdmichaelb]

Well so far I've survived every "ban wave" and I've used champion farming more out of anything that i've botted. I used Giles' three main plugins so maybe that had a roll to play?

 

[Croga]

So...errr.r.... No auctions, no gold selling... What the heck are you using those accounts for then?
It's either or mate, you were either using RMAH or you were selling gold, there's no other options if you're running 3 bots for 12 hours a day each.

 

[teivovo]

Erm.. maybe he was like me.... botting for fun... ? I bot to buy stuff on the auction house... to improve my toons... that's about it...

 

[mephuser1000]

So...errr.r.... No auctions, no gold selling... What the heck are you using those accounts for then?
It's either or mate, you were either using RMAH or you were selling gold, there's no other options if you're running 3 bots for 12 hours a day each.

Erm.. maybe he was like me.... botting for fun... ? I bot to buy stuff on the auction house... to improve my toons... that's about it...

Combining the facts that I started botting from 21st Jul to now (which isn't that many days) and less than 12hr/day of botting Act 1 Inferno Champions with a DH (not Barb) a day and that DH Tank gear costed like 60M gold in total before ban, all gold made were spent onto buying gear from the GAH.

I didn't expect to be banned that quickly botting Act 1 Inferno Champions from a legitimate hand-levelled account, not to mention 3 of them banned at once.

 

[htnt7919]

how did you make gold from Act 1 champion when you have no auction on botted account ? That seem suspicious even to me not just blizzard .

 

[MuffStuffer]

I asked this in another thread, what was your game delay set at?

 

[mephuser1000]

how did you make gold from Act 1 champion when you have no auction on botted account ? That seem suspicious even to me not just blizzard .

You don't have to put up auctions on your botted account. Anyway, with prices of Exquisite essences so low, I set the bot to vendor off everything.

I'm guessing that you didn't read this part:

- join games together to your main to exchange gear etc?
Ans: Main -> passes gear to Non-botted trade account. Non-botted trade account passes gear to Bot account.
Trade account doesn't come into contact with public players and doesn't sell gold.
Trade account has a Level 10 char that killed Skeleton King.

I asked this in another thread, what was your game delay set at?

5 to 30 (default was 3 to 15, i think)

 

[cdmichaelb]

Did you have friends on your friendlist?

what should i do if i find someone using bot? - Blizz Tracker - Diablo Discussion and Community Forums - DiabloFans.com

 

[mephuser1000]

Did you have friends on your friendlist?

Only Friend = Trading account which is not botted.

 

[Radonic]

Maybe they are tracking your main account? If its the same main account that got banned in last wave? They just check how your trade with it and where it end up...

 

[Gingerbread]

Only Friend = Trading account which is not botted.

sorry to hear of your bans.

It's likely that one of you a/c were flagged, there is a long list of things the champ profile does repeatedly which could get noticed, (I'm not going to list them here for obv reasons) and all 3 bots were linked via your friend list trade a/c, further investigated and then banned.

I have a similar setup to you, hand leveled a/c, only running a1 champ farming, tho I am running all of mine from the same PC/IP address as I figured they are all linked via the friend list trade a/c anyway, fingers crossed I last long enough to at least pay for the game keys

 

[mephuser1000]

Maybe they are tracking your main account? If its the same main account that got banned in last wave? They just check how your trade with it and where it end up...

sorry to hear of your bans.

It's likely that one of you a/c were flagged, there is a long list of things the champ profile does repeatedly which could get noticed, (I'm not going to list them here for obv reasons) and all 3 bots were linked via your friend list trade a/c, further investigated and then banned.

I have a similar setup to you, hand leveled a/c, only running a1 champ farming, tho I am running all of mine from the same PC/IP address as I figured they are all linked via the friend list trade a/c anyway, fingers crossed I last long enough to at least pay for the game keys

I won't deny that there is such a possibility, that Blizzard left the main account unbanned and intact so that they could trace future bot activity via association even if it's on a different IP/HWID.

This means that Blizzard has traced up to 2 degrees of association: Main Account -> Trade Account -> Bot Account.

From this, they could have created a detection profile for detecting longer profiles like [A1 - Inferno] Champion-Hunting which will work on other accounts not "caught through association with the honey-potted unbanned Main Account".

Like I mentioned earlier on another thread:

The fact that the forums/profiles are public means that everytime we make a forum post that Public Profile X always experiences the same "buggy stuck situation Y" at Location Z means that Blizzard will focus their detection on X, Y and Z.

Since we are not even experiencing bans by the hundreds, it's safe to assume that Blizzard doesn't have an effective method of direct mass automated detection yet.

 

[Radonic]

I won't deny that there is such a possibility, that Blizzard left the main account unbanned and intact so that they could trace future bot activity via association even if it's on a different IP/HWID.

This means that Blizzard has traced up to 2 degrees of association: Main Account -> Trade Account -> Bot Account.

From this, they could have created a detection profile for detecting longer profiles like [A1 - Inferno] Champion-Hunting which will work on other accounts not "caught through association with the honey-potted unbanned Main Account".

Like I mentioned earlier on another thread:

But i dont understand how that profile would work since this profile at pretty random... But if that theory youre saying is true, then we should be clear when we start to use the Random dungeon system!

 

[Gingerbread]

From this, they could have created a detection profile for detecting longer profiles like [A1 - Inferno] Champion-Hunting which will work on other accounts not "caught through association with the honey-potted unbanned Main Account".

At the risk of derailing too far into 'ban theories' territory, they don't need to trace a/c like that to knock up a detection profile, they can just get a db license themselves and run the most popular profiles and create detection templates that way. If the forums were private and only readable by subscribers they'd still have access to them and would still monitor them for easy giveaway spots on how to spot bots.

I'd agree that Blizz don't have a means to mass detect bots, they probably never will. It looks like their 'bot detection ban team' is just a few staff members who are working on other stuff within Blizz most of the time.