Yeah you should really try to authenticate their hash with Gamespy or else you're going to have hundreds of thousands of one-time random hashes.

In the past year, just the Gulch Modacity server has had about 250k "unique" player hashes logged. Although I have no real way to determining which are legit, of that, the vast majority of the hashes have less than 10 kills. I assume this is because the players start the game with a new random hash, joined, played, then quit. The next time a player joins, they have a different hash.

This is really nothing against pirates...I mean, if they used the same key every time they played, I would still agree to tracking them. However, the problem is not the "pirating" issue as much as it's a problem with the database tracking.