Most are shameless really. The crafted gear is one example. Now if someone were logging what everyone was wearing as you stand around a crowded area, you would eventually find the player who owns that crafting alt, if that is indeed a crafting alt and not the player themselves. Too much work for a player, but I'm sure the STF does something like this.
The thing with gathering bots is that even if a human was using website to check the timing of the nodes, there would be seconds, before the character responds, and they would actually move towards the node as though the keyboard or game controller was used, and the timing would be inconsistent (eg they'd miss some times if they went to dinner or something.) A bot however never misses, reacts within 500ms of the node appearing, and if they aren't already in front of it, move linearly to it (mounts help this since they can summon, go straight up, go to the target, go straight down, and then select the node without unmounting) it's that "too accurate" aspect which gives them away, and even a bot designed to mimic a player as much as possible (eg only sends input via Keyboard, Mouse or Game controller) is still going to read the network data to know where the node is, and where the character currently is. Close the gap between the player and the node, and then activate. The most obvious bots are the ones that simply have those nodes set as waypoints in their script, and thus they always move in exactly the same manner.
The STF could catch both by exploiting the fact that they're not humans and can't actually see what's on the screen. Throw obstacles in the way so the "waypoint"'s are blocked, put aggressive monsters in the way that blockade the node and respond to "smell", so they can't simply walk around the monster, they have to wait for the monster to move. If the monster can't attack them (the player is underground, behind an obstacle) then that alerts the STF of "unreachable" players.