What's new
By:
  • Visit Rebornbuddy
  • Visit Resources
  • Visit API Documentation
  • Visit Downloads
  • Visit Portal
  • Visit Panda Profiles
  • Visit LLamamMagic

Did Blizz just banned an entire IP range?

they are either ip checking or they can find DB in my opinion, I had 2 new accounts banned that just botted for 4 hours over the night, i had 8 other accounts banned already all from same IP, either they are watching anything that comes from my IP or they can see DB, how else could they flag my new accounts so fast overnight
 
I think i found a simple way to check, I am going to use a guest pass and load DB on it, and just play normal for a little and leave it on if it gets banned What else can i say
 
I doubt they are using illegal methods to catch people. If they were, it would be 100% ban rate, which isn't the case. They will not kneejerk ban based on an IP address. That said, whoever said that it will raise extra suspicion is correct. If they have 100+ accounts logging in from the same IP, it may cause extra scrutiny on their part.

The bans will have some human interaction to avoid false positives, hence the delay for some people getting banned. It is ridiculously easy for Blizzard to pull a list that would be close to 90% accurate based on hours played, gold earned..etc. We don't see everyone getting banned because blizzard obviously has some human interaction in the actual ban reviewing process. Every additional thing you do that fits the profile would make your account a low hanging fruit for whatever team works on this stuff at blizzard.

Just common sense to avoid other things that would show up on an automated trend report. Just my 2c.
 
The number of ban reports still looks trivial compared to what the number of users must be.
I'm still botting away waiting for my first ban (knock on wood). There seem to be many ways that you can set flags.. and I'm sure they have a ton of data. Matching a number of bots to a specific detection pattern must be pretty trivial to them with the amount of data they have access to.. if they threw me some of their data I'm pretty sure I could write up detection code that operated with a very small margin of error pretty easy (and I'm not a great programmer).
I'll keep doing things a bit different than everybody else. The last thing I want to do is to run the same way everybody else does.

I would be curious what the ban count is as a % of total users though... my guess is that it's still very very small :)
 
Oh yeah, and about MAC, I doubt they log it, but who knows. What the MAC is good for is yacking a new DHCP address from your ISP every so often. Ask your cable / DSL / whatever provider how many public IPs they will hand out to you. Many have some sort of MAC limit, and some are downright miserly with their IPs :). My ISP, for example limits you to 5 simultaneous MAC addresses in the arp table at a time, cleared every 5 minutes of inactivity. Their pools are generally a /24 or larger, so you can have five IPs at the same time with a minimum "grab bag" size of 253 addresses. Just use a mac address cloning tool, normally built into your little linksys or whatever router.
 
In short...
I don't believe it's your ip..
I don't believe it's your mac..
I don't believe it's your profile..
I don't believe it's your usage stats..

it's a combination of everything that screams bot in a way that's easy to detect with minimum error :)
 
Just lost 1 account. All my accounts are on their own V P N's and VMware sessions. They only got 1 out of 5.. all others still running fine. I was blatent about botting, 24/7, sold gold from it, pretty much screamed I'm a bot.. About time they got around to it.
 
It's really not ridiculous to think that they put banned account tags on probation for a while..maybe permanently. A tag that is easy and keeps coming up is IP address. If a criminal breaks the law within the constraints of a society, he typically is placed on probation..i.e. extra scrutiny when he is set free. If I were blizzard and I banned an account coming from a particular IP, and a new account began playing with the same IP, I would definitely give it a glance.

Guess you can start with the tinfoil hat comments now, but I think it's actually very efficient and reasonable for Bliz to keep a table of known botting IPs.
 
skyseeker said:
I think i found a simple way to check, I am going to use a guest pass and load DB on it, and just play normal for a little and leave it on if it gets banned What else can i say
Click to expand...

that wont do any good, Starter Guest accounts = free, you cannot trade, or join any games with normal players. I dont think blizzard would give a shit.
 
If you have X accounts coming from an ip with a common residential hostname running sarkoth 200+ times an hour for Y hours a day (where Y is some ridiculous number)... then yes, I believe it's that simple. Bonus points if the hardware id matches the accounts to a single system and that ip has had past bans. Keep in mind that the type of ip in many cases is very transparent. There are differences between your residential ip and the ip that the internet cafe uses across the street.. and differences between both of those and V P N/Pr0xy ip's.
 
Last edited:
termite said:
So i used a famous *v p n* service to bot and play my accounts. Just it appears to me that they automatically banned based just on this IP address. Otherwise i cannot explain how they managed to ban my 3 new accounts which are just hours old.
Click to expand...

So, this might have been a factor (not much of one.. they know it's a v p n service and exactly which service it is), but it's not the full story
 
The-Lord said:
Your Mac address and SID are same even when you use ***.
Click to expand...
Just to debunk this myth AGAIN:

The MAC address Blizzard sees is the one from the router that connects you to the Internet. If you're using a VP* then Blizz will only see the MAC of the router your VP*provider uses.
The Internet, and thus Blizzard, is utterly unaware of the MAC address of the network card in your PC.
 
Croga said:
Just to debunk this myth AGAIN:

The MAC address Blizzard sees is the one from the router that connects you to the Internet. If you're using a VP* then Blizz will only see the MAC of the router your VP*provider uses.
The Internet, and thus Blizzard, is utterly unaware of the MAC address of the network card in your PC.
Click to expand...

Some think they can see both, but it isn't true. The truth is they can't see past the modem network wise but you can spoof your modems mac address if you really wanted to.
 
Honestly, it's a moot point since IP would be far more useful to them, but they can see both. They have a program installed on your computer that uses the network stack. If they didn't have that, then you would be correct..sorta. The source IP will remain the same from A to Z, but the source MAC will change @ each hop. That means they won't even see your modem's MAC. They will only see the adjacent layer 2 device's MAC, which would be on their own network or at best their transit peer's network. Case in point, open your command prompt and run netstat. You probably have a ton of established connections. Now run arp -a. You will only see the MAC addresses on your local or layer 2 network. Once again, just informational stuff. Not really useful info for the discussion I guess :)
 
You must log in or register to reply here.
Back
Top