Diablo 3 Ban Reports Go Here

[Knight905416]

Seems to becoming more clear what is going on. There are a few things that are obvious:

1) They are primarily targeting multiple botters
2) They hate HB/IB with a passion
3) They are IP banning

No they haven't got everybody, and no I can't explain all the bans. But I think I have a theory here. Blizzard is able to look-up who is connecting through what IP, how long they have played, etc. They are easily finding people who are connecting through 5+ accounts on the same IP, and playing for an above-average time per day. Then on further investigation they learn that you are running the same stuff, again and again. It doesn't take a wizard to realize you are botting, and then they throw you the ban hammer.

After that, your IP, e-mail, etc. is put on the watch list. You go out, buy yourself a few more copies and start back up again. Blizzard has you on their watch list, and BAM you get banned within 24 hours. From the reports coming in, it is becoming obvious that Blizzard is much more interested in removing the multi-botter accounts, but isn't afraid to throw the ban hammer at solo users to make their point, if they can find them.

IB/HB bans are even easier to find, because Warden can catch them, unlike auto-it, which would take a manual investigation on Blizzard's part. Which is one reason why they borrowed the WoW GM's to investigate and find these botters. What people do not realize is that Warden can also catch you by using MF swap, because there is a pattern there. The cursor moves in a straight line from item to item. When a player moves their mouse, it is not in a straight line across the rows.

For developers: Add randomization to mouse movements, including random timers. This is primarily directed to MF swap developers, try to focus on a randomized wave/noise pattern for the mouse movement.

For botters: Unless you don't care about the bans, till it down. Fly only 1 bot account, on auto it, for no more than 16 hours a day, in 2 shots (1x 8 hours = sleep, 1x 8 hours = work), and give your account at least 2-3 days a week to rest. Use bots with randomization in mouse movements and timers. You are still going to be at risk, but it will be far less significant than those currently botting 10 accounts 24/7. Also keep in mind the other people in your household that play legitimately, because you put them at great risk. If Blizzard IP bans you, they will be stuck with it as well. If you fear an imminent ban and give them your gold/items, this also places them at risk.

Everybody will still be on high-risk until we figure out every little trick Blizzard is doing, but it is important we continue to work towards that endeavor by posting good, solid ban information.

I really don't think its that sophisticated. I believe they are just counting games per unit of time and the guys who are above a certain level are banned. As a clue to this, they are introducing game limits,

Blizzard introducing Game limits in Diablo 3

and if your over a certain number, your locked out, which is better than a ban. But those same numbers I believe are driving the bans presently. Once they have an account flagged for a ban - say 1440 games in a day,(game a minute) x 2 weeks might be something like 20k. Have a look at D3Debug.txt file. I was shocked it recorded a bot run, and I stopped it at something like game 784. Someone in game 20000 is going to get banned, lol. I think the key for the numbers would be from the time Blizzard warned they would start banning, until the first bans is our number. After all of that, there might be some IP ranges they look at to ban other accounts that they believe are the same guy.

And the idea that they are keeping track of mouse movement and clicks is a server destroyer idea. Their servers would last 5 minutes with that much information being passed to them. They could barely handle log in.

[internalcumbustion]

Also possible, because VMware would count as third party software and violate the TOS. Hell, they are banning Linux users for using WINE, although they claim they aren't. So why not windows users for using VMware?

I agree and that is exactly what I am thinking. Maybe that is how they are catching people. Its obvious their capabilities are limited or they would not feel the need to try to go back to reducing the number of games players make.

With so many people running multiple sessions it sounds like everyone is using VMware or a similar product too.

[nhcoohrh]

Also possible, because VMware would count as third party software and violate the TOS. Hell, they are banning Linux users for using WINE, although they claim they aren't. So why not windows users for using VMware?

Vmware 3rd Party product LoL, dumbest point here in the topic. Vmware it's just like another PC you are running, you are running Windows not Vmware!. you dont get banned for using windows as 3rd party software (and yes its 3rd party software) lol.

The WINE it's a special software that changes the "drivers" for graphics this could lead to potential hacks of the game client, like changing the hole graphics. On Windows you don't do that on fly with the vmware graphics driver lol.

Well they are analyzing data, and patterns are banned to get review of support department. They were setting this process before, now they launch it since they have the human resources to analyze each suspection case. Every ban gets human review remember this. System just colects data from big database follow patterns and flag up to review.

That's why you even got bans in offline hehe. Your account could be already in queue for ban hammer. I believe the future of gold farming with bots could be only achieved if legit.

With legit I mean, run your bot as an human. He works for 8h day, with pauses, he grind 2 or 3 different spots. He creates gold that he will use for his own and trade after on GAH for items.

Don't start a new account fill with 40MIL and then start producing gold per day at big rate. If your results are higher than the normal average then you got a cross on you.

[TMichael]

And the idea that they are keeping track of mouse movement and clicks is a server destroyer idea. Their servers would last 5 minutes with that much information being passed to them. They could barely handle log in.

This would be true if Warden only sent raw data. But it's been evolving, and we really have no idea what it currently does. It's not unreasonable to imagine Warden tracking mouse movements and analyzing them client side. This way, a simple yes or no regarding that aspect of play can be sent to Blizzard, and, combined with a few other suspicious markers, could flag you for a closer look.

According to a recently posted interview (something markeedragon did a while back I think), the analytics that game companies use today are probably more advanced that what's used on Wall Street. They look at an increasing number of data points, and then take a closer look at outliers- the players on one end of the chart or the other, who are doing things differently than most of the player base. And the formula constantly changes based on what they learn about botters/exploiters and their changing tactics.

TL;DR: You can either bot like a mad man and hope to make back your investment between ban waves, or you can take the opposite approach and make your bot as human-like as possible. The first option is definitely getting more difficult. I use the second approach myself, and will probably drop the game completely when my account finally gets hit.

[TMichael]

I agree and that is exactly what I am thinking. Maybe that is how they are catching people. Its obvious their capabilities are limited or they would not feel the need to try to go back to reducing the number of games players make.

With so many people running multiple sessions it sounds like everyone is using VMware or a similar product too.

Blizzard's issue might have more to do with manpower than detection. They manually check every account before issuing perma-bans, and I suspect it's costing them lots of money to staff this seemingly endless string of ban waves.

Finding a way to limit game creation without p$ssing off too many regular players would be the optimal outcome for them, but I don't think they'll pull it off. However the limit is imposed, I anticipate another gigantic backlash from the regular community. We'll soon find out, though.

[mayhem81]

Vmware 3rd Party product LoL, dumbest point here in the topic. Vmware it's just like another PC you are running, you are running Windows not Vmware!. you dont get banned for using windows as 3rd party software (and yes its 3rd party software) lol.

The WINE it's a special software that changes the "drivers" for graphics this could lead to potential hacks of the game client, like changing the hole graphics. On Windows you don't do that on fly with the vmware graphics driver lol.

Well they are analyzing data, and patterns are banned to get review of support department. They were setting this process before, now they launch it since they have the human resources to analyze each suspection case. Every ban gets human review remember this. System just colects data from big database follow patterns and flag up to review.

That's why you even got bans in offline hehe. Your account could be already in queue for ban hammer. I believe the future of gold farming with bots could be only achieved if legit.

With legit I mean, run your bot as an human. He works for 8h day, with pauses, he grind 2 or 3 different spots. He creates gold that he will use for his own and trade after on GAH for items.

Don't start a new account fill with 40MIL and then start producing gold per day at big rate. If your results are higher than the normal average then you got a cross on you.

true but its a option for them, just look in D3debug.txt

vm3dum.dll
VMware SVGA 3D (Microsoft Corporation - WDDM)
\\.\DISPLAY1
Driver Version 7.14.1.1134

if they send that info after X runs in Blacklist spots (like Dank Cellar) for review they can catch alot of the people doing it,

even just sending that info on creating a game on whatever location can mark the people to later review, will be nice to know if they are sending graphics information

[ithelast]

4 Accounts Banned during first Ban Wave This week. They were banned a few hours apart but on the same day.

All on same IP
All Vmware
All Custom AutoIT Sarkoth Script (random movement/sleeps and break timers) Running 4-16 hours per day.
East Coast
3 Main Accounts and 1 Safe Account on Same IP NOT banned.

[zanderos]

Still botting away on Vmware for 24 hours a day since a week ago using AutoIT Sarkoth script, no random movement or sleeps or whatever, stoped caring about d3 so botting sarkoth and selling whatever gold i find during it until i get banned

[internalcumbustion]

true but its a option for them, just look in D3debug.txt



if they send that info after X runs in Blacklist spots (like Dank Cellar) for review they can catch alot of the people doing it,

even just sending that info on creating a game on whatever location can mark the people to later review, will be nice to know if they are sending graphics information

That was exactly my point, it is very easy to detect that you are running in a VM environment. The poster above trying to differentiate the difference between VMware and WINE is talking semantics and nonsense. Blizzard is not going to listen to anyones differentiation between the two before deciding on bans. They could, and most likely do, look at both and say they both are unsupported.

[BigLootz]

Sorry to say, but there is no practical reason for playing Diablo 3 from VMWare. It could be a possibility or rather a criteria of the data analysis used to determine automated playing.

That is all Warden is.. a sophisticated data analysis tool. But it's only as smart as those that use it. Why do you think Sarkoth has been left in play? Data acquisition/analysis. They have spent plenty of time analyzing the information gleaned to develop criteria for Warden to flag/ban accounts with.

Blizzard is here on these forums... you are ignorant if you believe otherwise. They have multiple accounts and some are donators as well in order to have access to the scripts/bots for comparative data analysis.

But with Diablo 3.. there are a LOT more individuals botting in order to restore some level of enjoyment to the game. We don't sell gold, we don't transfer gold... we're just trying enjoy the game by reducing the earning curve Blizzard has totally ****ed up. Not sure how that might adjust Warden data.. but I'm sure it does.

Suffice it to say that reinstating the game creation limit is somewhat of a "throwing the hands up" response to trying to eliminating certain scripts/practices that are nearly impossible to differentiate from human play.

They realize that they have created a design that forces many to repetitively human farm games/areas/bosses... and that makes catching those that do it automated very difficult.

[Dyz]

Still botting away on Vmware for 24 hours a day since a week ago using AutoIT Sarkoth script, no random movement or sleeps or whatever, stoped caring about d3 so botting sarkoth and selling whatever gold i find during it until i get banned

Pretty much where I am at. So far im at $5700 in my paypal. Working on a badass vacation =P

[KgKris]

Still botting away on Vmware for 24 hours a day since a week ago using AutoIT Sarkoth script, no random movement or sleeps or whatever, stoped caring about d3 so botting sarkoth and selling whatever gold i find during it until i get banned

Server location? Date of account purchase please?

[jchang]

Pretty much where I am at. So far im at $5700 in my paypal. Working on a badass vacation =P

Nice, but I'd withdraw that if I were you

Heard/have too many bad experiences with PP.


-edit-

Banned on 7/7 on US, using DB and HB.

1 got hit a week ago, then 3 yesterday [i shut down the other 3 immediately] and ran them ~12hrs later. Woke up to the surviving 3 gone too

[redaoleht]

if their ip banning, then if i wanna buy an account and not bot n play super legit i still will get banned.

[bluesin]

That was exactly my point, it is very easy to detect that you are running in a VM environment. The poster above trying to differentiate the difference between VMware and WINE is talking semantics and nonsense. Blizzard is not going to listen to anyones differentiation between the two before deciding on bans. They could, and most likely do, look at both and say they both are unsupported.

First of all, your post was rude and trolling. Secondly, I know the difference very well as I use them both on a daily basis. My point was simply put, that from Blizzard's perspective, it is 3rd party software. There is no reason to run Diablo 3 through a VM, and Blizzard knows this. As stated by this user:

true but its a option for them, just look in D3debug.txt

vm3dum.dll
VMware SVGA 3D (Microsoft Corporation - WDDM)
\\.\DISPLAY1
Driver Version 7.14.1.1134
if they send that info after X runs in Blacklist spots (like Dank Cellar) for review they can catch alot of the people doing it,

even just sending that info on creating a game on whatever location can mark the people to later review, will be nice to know if they are sending graphics information

Proves my point, he just said worded it a little better.