SRL Archive - Banned from RS

How could they find out?


Nufineek

2014-02-14 12:27:33

Ok. So - I'm running 3 simba scripts. I run each of them in separate virtual machine with it's own VPN IP. I'm running it about 15 hrs a day. And mainly I use the gained money to put on my main, occasionally sell.

Yesterday, I logged the 3 accs in and after 5 or 10 minutes I got logged out - PERM BANNED - reason "Macroing goldfarmer".

Well now, due to the timing of the ban (all 3 accs in very short time), I assume that they recognised I am one person. Even using the different IPs and having no cache files in common. Another fact that could have attracted their attention could be the running time. However, I had been running for even longer times and that never seemed to be a big deal. There are many nolifers that play for that long so…

What do you think could led them to me/connection of the accounts?

Hoodz

2014-02-14 12:45:58

and thats what we call: botwatch

Kevin

2014-02-14 12:46:33

Quite possibly it was the activity, or the fact that you may have been flagged during one of the earlier runs, but not banned yet so they could create an artificial ban-wave from an activity - were you doing a more heavily botted activity? It's been noted that they won't necessarily ban as soon as you are detected to make it harder to determine what factor exactly got you detected.

Of course it could always be something else as well…

[XoL]

2014-02-14 13:41:42

Same activity, probably just a ban wave on said activity.

Nufineek

2014-02-14 14:33:13

But on one of these account I had started doing this only 2 days before the ban or so. Isn't it rather caused by my script?

Hadley

2014-02-14 14:36:32

Was each account on 15 hrs/day? That could do it as well, that's a big give away imo. If you had been doing longer in the past they could have been keeping they're eyes on you until they had enough evidence, etc. I've noticed delayed bans are common now. It could be a lot of factors though.

Jake

2014-02-14 14:39:01

From: Nufineek
But on one of these account I had started doing this only 2 days before the ban or so. Isn't it rather caused by my script?

Most likely.
Having many VPNs/Proxies while botting doesn't guarantee that you'll be immune from being caught.

Jagex is testing out new anti-bot software.
(I made a thread about this earlier in the week regarding 07 scape, looks like it affects RS3 now as well)
http://villavu.com/forum/showthread.php?t=108054
Here's some more proof.

Ian

2014-02-14 23:13:15

From: Four
Most likely.
Having many VPNs/Proxies while botting doesn't guarantee that you'll be immune from being caught.

Jagex is testing out new anti-bot software.
(I made a thread about this earlier in the week regarding 07 scape, looks like it affects RS3 now as well)
http://villavu.com/forum/showthread.php?t=108054
Here's some more proof.

Where is it said that it affects RS3 now as well?

The impression I had was that they were upgrading OSR bot watch to the level that RS3 bot watch was at. I may be wrong though.

The Mayor

2014-02-15 00:17:59

The answer is obvious isn't it? Your script is detectable.


This is just my opinion, but I think Jagex's botwatch software creates a "profile" of a particular activity (particularly all gold farming activities) by recording movements of all players who are performing that activity. The truth is that 99% of runescape scipts simply repeat a loop, over and over again, generating heaps of data for jagex to compare. Even though scripts have random waits and random coordinates, this does not make them human-like, this just means those scripts have…random waits and random coordinates. More importantly, all of this 'randomness' is random behavior 'within a range' (i.e. randomRange(1000, 2000)), meaning you are repeating a task, within a given range, over and over again. What might seem like randomness is actually not, and I'm pretty sure that botwatch picks up on this.

Similarities between players (and even the same player over a period of time) are what jagex uses to create this "profile". Two different players performing the same task might show very little similarity between each other, but two groups of players might show a high level of similarity with the other members in the same "group". In a case like this, jagex can assume there is two different scripts that are used to perform the same task. Scripts that were undetectable in the past are now detectable. It doesnt matter where in the world you are playing, if you match the profile, you are banned (meaning VPNs etc are useless).

I've been working this script in the last few days where a "player profile" is randomly generated each time you run the script. It is basically a set of global variables which are generated during script startup, meaning a different person is playing each time you run the script. One "player" might be more inclined to perform certain actions, such as rotate the compass to a particular angle, walk a certain path more often, simulate different levels of multitasking (waiting, mouseOffClient etc.), preference of bank booth over NPC etc. Even the random wait 'range' is generated as part of the player profile. I'm even working on making all my bots talk to each other in the clan chat by reciting various MSN/skype transcripts I found online ;)

Turpinator

2014-02-15 01:48:40

(assuming these accs were not f2p…)
has anyone ever considered how the membership was bought? a creditcard? paypal? bonds?

bonds would be the safest, imo… but how much does it take to link 3 accs together that all received 7m from another?

Flight

2014-02-15 01:58:26

I've heard quite a few accusations being made about red-flagged VPNs in the past on Sythe, about how they were linked to what Chinese gold-farmers use. If I were in your shoes I'd be changing a lot of things up but the absolute first thing I'd look over closely is the VPN.

Hoodz

2014-02-15 04:32:20

From: The Mayor
The answer is obvious isn't it? Your script is detectable.


This is just my opinion, but I think Jagex's botwatch software creates a "profile" of a particular activity (particularly all gold farming activities) by recording movements of all players who are performing that activity. The truth is that 99% of runescape scipts simply repeat a loop, over and over again, generating heaps of data for jagex to compare. Even though scripts have random waits and random coordinates, this does not make them human-like, this just means those scripts have…random waits and random coordinates. More importantly, all of this 'randomness' is random behavior 'within a range' (i.e. randomRange(1000, 2000)), meaning you are repeating a task, within a given range, over and over again. What might seem like randomness is actually not, and I'm pretty sure that botwatch picks up on this.

Similarities between players (and even the same player over a period of time) are what jagex uses to create this "profile". Two different players performing the same task might show very little similarity between each other, but two groups of players might show a high level of similarity with the other members in the same "group". In a case like this, jagex can assume there is two different scripts that are used to perform the same task. Scripts that were undetectable in the past are now detectable. It doesnt matter where in the world you are playing, if you match the profile, you are banned (meaning VPNs etc are useless).

I've been working this script in the last few days where a "player profile" is randomly generated each time you run the script. It is basically a set of global variables which are generated during script startup, meaning a different person is playing each time you run the script. One "player" might be more inclined to perform certain actions, such as rotate the compass to a particular angle, walk a certain path more often, simulate different levels of multitasking (waiting, mouseOffClient etc.), preference of bank booth over NPC etc. Even the random wait 'range' is generated as part of the player profile. I'm even working on making all my bots talk to each other in the clan chat by reciting various MSN/skype transcripts I found online ;)


Skype me :)

Nufineek

2014-02-15 10:41:56

From: The Mayor
The answer is obvious isn't it? Your script is detectable.


This is just my opinion, but I think Jagex's botwatch software creates a "profile" of a particular activity (particularly all gold farming activities) by recording movements of all players who are performing that activity. The truth is that 99% of runescape scipts simply repeat a loop, over and over again, generating heaps of data for jagex to compare. Even though scripts have random waits and random coordinates, this does not make them human-like, this just means those scripts have…random waits and random coordinates. More importantly, all of this 'randomness' is random behavior 'within a range' (i.e. randomRange(1000, 2000)), meaning you are repeating a task, within a given range, over and over again. What might seem like randomness is actually not, and I'm pretty sure that botwatch picks up on this.

Similarities between players (and even the same player over a period of time) are what jagex uses to create this "profile". Two different players performing the same task might show very little similarity between each other, but two groups of players might show a high level of similarity with the other members in the same "group". In a case like this, jagex can assume there is two different scripts that are used to perform the same task. Scripts that were undetectable in the past are now detectable. It doesnt matter where in the world you are playing, if you match the profile, you are banned (meaning VPNs etc are useless).

I've been working this script in the last few days where a "player profile" is randomly generated each time you run the script. It is basically a set of global variables which are generated during script startup, meaning a different person is playing each time you run the script. One "player" might be more inclined to perform certain actions, such as rotate the compass to a particular angle, walk a certain path more often, simulate different levels of multitasking (waiting, mouseOffClient etc.), preference of bank booth over NPC etc. Even the random wait 'range' is generated as part of the player profile. I'm even working on making all my bots talk to each other in the clan chat by reciting various MSN/skype transcripts I found online ;)


Well, yes - it is quite obvious. I am just not sure if there isn't any ridiculously bot-like part in my script as it is my 1st script. I should also include something like player profile assigning function that you were talking about. Is it included in any of your current scripts so I could look at how you build this? Also, I like the idea of the bots talking to each other in the clan chat.

Could you look at the script if there isn't some part that could clearly have caused this? Thanks for your answer btw.

http://villavu.com/forum/showthread.php?t=108103

The Mayor

2014-02-16 15:36:16

From: Nufineek
Well, yes - it is quite obvious. I am just not sure if there isn't any ridiculously bot-like part in my script as it is my 1st script. I should also include something like player profile assigning function that you were talking about. Is it included in any of your current scripts so I could look at how you build this? Also, I like the idea of the bots talking to each other in the clan chat.

Could you look at the script if there isn't some part that could clearly have caused this? Thanks for your answer btw.

http://villavu.com/forum/showthread.php?t=108103


No not in any of my current scripts, still a work in progress.

Nufineek

2014-02-16 18:12:36

Got goldfarm ban again on another one fresh account. I was using improved script with better antiban and slower mousespeed which I thought were things that allowed them to detect it. Do you think it's just the activity or just all the IPs I use have to be flagged?

The Mayor

2014-02-16 18:54:48

Could be that your accounts are derivatives of the same email address? There are a few other ways they can detect but we won't discuss these here :)

Unfold

2014-02-16 19:22:30

First,

If your using some popular VPN company, it has probably already been i.p banned from other botters.

Second, anyone can check if an I.P is being used as a proxy etc. Jagex's botwatch probably picks your i.p and sees that it's a vpn or hosting company etc and flags your account..


/thread

rsbots2013

2014-02-18 05:20:05

From: The Mayor
The answer is obvious isn't it? Your script is detectable.


This is just my opinion, but I think Jagex's botwatch software creates a "profile" of a particular activity (particularly all gold farming activities) by recording movements of all players who are performing that activity. The truth is that 99% of runescape scipts simply repeat a loop, over and over again, generating heaps of data for jagex to compare. Even though scripts have random waits and random coordinates, this does not make them human-like, this just means those scripts have…random waits and random coordinates. More importantly, all of this 'randomness' is random behavior 'within a range' (i.e. randomRange(1000, 2000)), meaning you are repeating a task, within a given range, over and over again. What might seem like randomness is actually not, and I'm pretty sure that botwatch picks up on this.

Similarities between players (and even the same player over a period of time) are what jagex uses to create this "profile". Two different players performing the same task might show very little similarity between each other, but two groups of players might show a high level of similarity with the other members in the same "group". In a case like this, jagex can assume there is two different scripts that are used to perform the same task. Scripts that were undetectable in the past are now detectable. It doesnt matter where in the world you are playing, if you match the profile, you are banned (meaning VPNs etc are useless).

I've been working this script in the last few days where a "player profile" is randomly generated each time you run the script. It is basically a set of global variables which are generated during script startup, meaning a different person is playing each time you run the script. One "player" might be more inclined to perform certain actions, such as rotate the compass to a particular angle, walk a certain path more often, simulate different levels of multitasking (waiting, mouseOffClient etc.), preference of bank booth over NPC etc. Even the random wait 'range' is generated as part of the player profile. I'm even working on making all my bots talk to each other in the clan chat by reciting various MSN/skype transcripts I found online ;)


Your a genius! Your ideas, advice, and help are all tier 110% and higher!

RuneDragon

2014-04-23 18:04:15

Can't Jagex MOD can ask game client to report back with a screenshot of the game client… This way they are 100% sure you are botter and no need to read you appeals.

VPN is easy to detect as @Unfold posted as they have IP range allotted to web hosting company, not a Broad Band/DSL/mobile service provider.