[Xanimos]

Also a way of dectecting if they are using a plugin for faster speed would be to use get_user_maxspeed() and if its been increased through a plugin. if not then he is hacking.