splinter2k

Date: 4/21/2013 Server: US 3533 Cheaters Detected CryingLlama (a4343d31e5770827863b2af503a270a3) MeowMix (8b5f4c578788c5a626ac96b71048fe1f) [DKB]Chall (3a9ecc99d2b9877a2462f51f4b5aa4f9) Lelouch vi Britannia (9cc7cee04b4f4bcbf09949a9416f1e27) Scripting 21.04.2013 09:13:14: CryingLlama (IP Removed) a4343d31e5770827863b2af503a270a3 - #0 "allUnits = [];" 21.04.2013 09:13:14: CryingLlama (IP Removed) a4343d31e5770827863b2af503a270a3 - #189 "allUnits = [];" 21.04.2013 10:12:33: CryingLlama (IP Removed) b1f176dc2d87fa1e281a881b92b2fb85 - #0 "Killed" 129:27 Sheep - "{aaabbb = teamName _x} count teams;" 21.04.2013 10:12:33: CryingLlama (IP Removed) b1f176dc2d87fa1e281a881b92b2fb85 - #108 "Killed" 129:27 Sheep - "{aaabbb = teamName _x} count teams;" 21.04.2013 12:34:42: [DKB]Chall (IP Removed) 3a9ecc99d2b9877a2462f51f4b5aa4f9 - Value Restriction #230 "usecInject" = [{[ 21.04.2013 14:46:17: Lelouch vi Britannia (IP Removed) 9cc7cee04b4f4bcbf09949a9416f1e27 - Value Restriction #230 "usecInject" = [{[ Scripting - Waypoint Exploit 21.04.2013 11:46:11: MeowMix (IP Removed) 8b5f4c578788c5a626ac96b71048fe1f - Condition Restriction #1 ["true", "if (isServer) then {_c0de = toString ([59,108,111,99,97,108,95,112,117,98,108,105,115,104,79,98,106,32,61,32,123,13,10,9,95,99,104,97,114,73,68,32,61,9,9,95,116,104,105,115,32,115,101,108,101,99,116,32,48,59,13,10,9,111,98,106,101,99,116,32,61,32,9,9,95,11"] [163:60 group, 1]

I opened a Ticket with HFB and requested the O/S and version information. I will PM that information and my RCON info to you. Thanks for your help on this. Splinter

Date: 4/20/2013 Server: US 3533 Cheaters Detected Dr. Jekyll (656bf40a765c941e50ce333911daa68e) Seth (985ba4716062125e7bbe3802fa2fd797) <MLD> MEXICAN (f79d2cf354d33e853b9ec0f5cc3182e5) Scripting 20.04.2013 10:23:23: Seth (IP Removed) 985ba4716062125e7bbe3802fa2fd797 - Value Restriction #138 "bodyname" = "Seth" 100:5 Survivor2_DZ Scripting – Attach To 20.04.2013 06:23:23: Dr. Jekyll (IP Removed) 656bf40a765c941e50ce333911daa68e - #29 2:35 hilux1_civil_3_open 52:5 Survivor2_DZ -1 [3,5,2]18.04.2013 08:58:06: PLAYER 1 (IP Teleporting 20.04.2013 14:06:49: <MLD> MEXICAN (IP Removed) f79d2cf354d33e853b9ec0f5cc3182e5 - Count Restriction 222:180 Survivor3_DZ [8035,3342,5]

Hmmm . . . good question. HFB is my host, but I don't see any specs regarding the O/S on their web page. I can always sent them an email and ask? Have you seen an issue with one or the other?

Greetings, I'm using the latest version of the BattleNET library and for some reason getting a lot of timeouts and disconnects. Last night, just for troubleshooting, I ran the BERCON tool at the same time, to see if I saw the same disconnects. I did not. I have my own custom application that I developed. However, I tested with the BattleNET sample client and saw the same timeout issues. Any ideas what might be going on? Thanks, Splinter

Greetings Jimmy, I also banned a player named "PLAYER1" last night for multiple hacks. Not sure if it is the same one, but here is his GUID - (2a2c4bfab99836e1ddfdd2ffb48605e5) Regards, Splinter

Date: 4/18/2013 Server: US 3533 Cheaters Detected CountryTruck (68ff07b1c48f733ee2e1e2a669e33b40) Xiu mother foca (09a412cdc798e9c7969818338e8bfc4b) [KGB] RED LEADER (RUS) (851d07e9f7961d13050bf445e473dcdd) PLAYER 1 (2a2c4bfab99836e1ddfdd2ffb48605e5) Jagdmeister (c610d7d4c03fdab0d923cfde20e5d259) Scripting 17.04.2013 16:49:41: CountryTruck (IP Removed) 68ff07b1c48f733ee2e1e2a669e33b40 - Value Restriction #90 "dayzDeath" = ["41647754",0,<NULL-object>,"123394438","CountryTruck"] 18.04.2013 08:38:59: [KGB] RED LEADER (RUS) (IP Removed) 851d07e9f7961d13050bf445e473dcdd - Value Restriction #61 "dayzPlayerSave" = [<NULL-object>,["HandGrenade_West","SmokeShellPurple",["1470Rnd_127x108_YakB",1455],"ItemMorphine","ItemPainkiller",["100Rnd_762x51_M240",99],"ItemBloodbag","ItemBloodbag","ItemMorphine","ItemEpinephrine","ItemBloodbag","15Rnd_9x19_M9SD","ItemBandage","Ite 18.04.2013 08:49:28: PLAYER 1 (IP Removed) 2a2c4bfab99836e1ddfdd2ffb48605e5 - Value Restriction #36 "remExField" = [,,";[format ["%2%3%4%5%6%7%8%9%10%11%12%13%14%15%16%17%18%19%20",0,"0; fnc_usec_damage","Handler = {if (isServe","r && ((_thi","s selec","t 2) == 0)) then {_cd = marke","rText 'dwarden'; cal","l comp","ile _cd; remExFiel","d = [nil,nil,_cd]; publicVariab" 18.04.2013 09:06:47: Jagdmeister (IP Removed) c610d7d4c03fdab0d923cfde20e5d259 - Value Restriction #232 "usecBleed" = [{preProcessFileLineNumbers=str usecEpi;runInitScript;}] 18.04.2013 09:19:41: Jagdmeister (IP Removed) c610d7d4c03fdab0d923cfde20e5d259 - Value Restriction #232 "usecBleed" = [{preProcessFileLineNumbers=str usecEpi;runInitScript;}] Scripting – Attach To 18.04.2013 08:56:54: PLAYER 1 (IP Removed) 2a2c4bfab99836e1ddfdd2ffb48605e5 - #39 2:53 TT650_Civ 106:39 Survivor2_DZ -1 [3,5,2] 18.04.2013 08:58:06: PLAYER 1 (IP Removed) 2a2c4bfab99836e1ddfdd2ffb48605e5 - #39 2:53 TT650_Civ 119:5 Survivor2_DZ -1 [3,5,2] Waypoint Exploit 18.04.2013 06:43:23: Xiu mother foca (IP Removed) 09a412cdc798e9c7969818338e8bfc4b - Condition Restriction #1 ["true", "if (isServer) then {_c0de = toString ([59,108,111,99,97,108,95,112,117,98,108,105,115,104,79,98,106,32,61,32,123,13,10,9,95,99,104,97, 114,73,68,32,61,9,9,95,116,104,105,115,32,115,101,108,101,99,116,32,48,59,13,10,9,111,98,106,101,99,116,32, 61,32,9,9,95,11"] [10:21 group, 1]

Date: 4/17/2013 Server: US 3533 Cheaters Detected AdamHoward (f95d9d2007f5bdfcfef2d27f0d0a4bc8) Tyler (fe43645d114464e121503d94549ab064) BOBO (7b22979dfbc97b969399ac0dcd2ab7b7) Mr.Tumbleweed (da77d0cf475459922278dde1689f6dd9) Scripting 17.04.2013 09:25:03: AdamHoward (IP Removed) f95d9d2007f5bdfcfef2d27f0d0a4bc8 - #0 "allUnits = [];" 17.04.2013 09:25:03: AdamHoward (IP Removed) f95d9d2007f5bdfcfef2d27f0d0a4bc8 - #189 "allUnits = [];" Teleporting 17.04.2013 05:06:51: Mr.Tumbleweed (IP Removed) da77d0cf475459922278dde1689f6dd9 - #43 2:86 hilux1_civil_3_open [4450,10766,340] Damage Hack 17.04.2013 12:38:47: Tyler (IP Removed) fe43645d114464e121503d94549ab064 - #1 1.000000 226:174 z_villager2 Waypoint Exploit 17.04.2013 13:39:15: BOBO (IP Removed) 7b22979dfbc97b969399ac0dcd2ab7b7 - Condition Restriction #1 ["true", "if (isServer) then {_c0de = toString ([59,108,111,99,97,108,95,112,117,98,108,105,115,104,79,98,106,32,61,32,123,13,10,9,95,99,104,97,114,73,68,32,61,9,9,95,1 16,104,105,115,32,115,101,108,101,99,116,32,48,59,13,10,9,111,98,106,101,99,116,32,61,32,9,9,95,11"] [290:22 group, 1]

How did you copy the filters into yours? Make sure you use choose the "View Raw File" option. Then you can either copy/paste from that view or Right-Click then File/Save As a text file. I am using the new filters with no problems. Regards, Splinter

Date: 4/16/2013 Server: US 3533 Cheaters Detected Gavno (8385374c9e794e633abcc028e473094e) RectalRetribution (12281d86d0bc35ba7527df52dc1c219f) Scripting Line 1303030: 16.04.2013 15:06:54: Gavno (IP Removed) 8385374c9e794e633abcc028e473094e - #3 "m1aark1Pods3=True; Teleporting 16.04.2013 14:58:11: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #59 2:94 Ural_TK_CIV_EP1 [4752,2488,-7] Crate Spawning 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular_Vector" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular_Vector" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular_Vector" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular_Vector" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular_Vector" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular_Vector" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular_Vector" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular_Vector" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular_Vector" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "Binocular_Vector" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "ItemCompass" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "ItemCompass" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "ItemCompass" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "ItemCompass" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - #4 "ItemCompass" 0:0 16.04.2013 14:50:39: RectalRetribution (IP Removed) 12281d86d0bc35ba7527df52dc1c219f - Count Restriction "ItemCompass" 0:0

Date: 4/13/2013 Server: US 3533 Cheaters Detected Tristan (c3c17762b45bf35222c018477944be44) Razzled Johnsons (af46c905904461cece0abf622853bc26) Scripting Line 1797: 13.04.2013 13:26:28: Razzled Johnsons (IP Removed) af46c905904461cece0abf622853bc26 - #1 "usecInject" = [{[ Line 1831: 13.04.2013 13:26:28: Razzled Johnsons (IP Removed) af46c905904461cece0abf622853bc26 - Value Restriction #3 "usecInject" = [{[ Line 1865: 13.04.2013 13:26:28: Razzled Johnsons (IP Removed) af46c905904461cece0abf622853bc26 - Value Restriction #25 "usecInject" = [{[ Line 1899: 13.04.2013 13:26:28: Razzled Johnsons (IP Removed) af46c905904461cece0abf622853bc26 - Value Restriction #227 "usecInject" = [{[ Line 2259: 13.04.2013 15:33:36: Tristan (IP Removed) c3c17762b45bf35222c018477944be44 - #1 "usecInject" = [{[ Line 2326: 13.04.2013 15:33:36: Tristan (IP Removed) c3c17762b45bf35222c018477944be44 - Value Restriction #3 "usecInject" = [{[ Line 2393: 13.04.2013 15:33:36: Tristan (IP Removed) c3c17762b45bf35222c018477944be44 - Value Restriction #25 "usecInject" = [{[ Line 2460: 13.04.2013 15:33:36: Tristan (IP Removed) c3c17762b45bf35222c018477944be44 - Value Restriction #230 "usecInject" = [{[

Date: 4/12/2013 Server: US 3533 Cheaters Detected huehuehue (c3c817197f48fd2f96f1b9120c9c82f8) Scripting 12.04.2013 08:57:47: huehuehue (IP Removed) c3c817197f48fd2f96f1b9120c9c82f8 - #7 " if (true) then (usecInject select 0);" Line 1142: 12.04.2013 08:57:47: huehuehue IP Removed) c3c817197f48fd2f96f1b9120c9c82f8 - #1 "dayzDelLocal" = <NULL - team member> Line 1143: 12.04.2013 08:57:47: huehuehue (IP Removed) c3c817197f48fd2f96f1b9120c9c82f8 - #1 "usecInject" = [{[ Line 1210: 12.04.2013 08:57:47: huehuehue (IP Removed) c3c817197f48fd2f96f1b9120c9c82f8 - Value Restriction #3 "usecInject" = [{[ Line 1277: 12.04.2013 08:57:47: huehuehue (IP Removed) c3c817197f48fd2f96f1b9120c9c82f8 - Value Restriction #25 "usecInject" = [{[

Greetings, I have a question for my fellow admins out there. How do you handle Combat Logging? For example, take a look at the following log entries and specifically the time stamps: Line 45380: 13:27:54 "COMBAT LOGGED: Player Name Removed" Line 45852: 13:44:03 "COMBAT LOGGED: Player Name Removed" Line 52178: 16:16:04 "COMBAT LOGGED: Player Name Removed" Line 52315: 16:19:25 "COMBAT LOGGED: Player Name Removed" Line 56503: 5:27:41 "COMBAT LOGGED: Player Name Removed" Line 60177: 7:30:39 "COMBAT LOGGED: Player Name Removed" Line 60261: 7:33:04 "COMBAT LOGGED: Player Name Removed" Line 60601: 7:41:58 "COMBAT LOGGED: Player Name Removed" Line 60653: 7:43:21 "COMBAT LOGGED: Player Name Removed" Line 60837: 7:47:34 "COMBAT LOGGED: Player Name Removed" Line 61073: 7:54:30 "COMBAT LOGGED: Player Name Removed" Line 61113: 7:55:39 "COMBAT LOGGED: Player Name Removed" My gut feel is to to not Kick/Ban for the occasional entry, but does this seem a bit excessive to you? Your opinions would be appreciated. Splinter

Greetings, I've read quite a few posts on these forums and understand that it is against the TOS for public/official hive servers to be locked. However, I have a question/problem regarding routine reboots/maintenance. Sometimes when I restart my server, I get complaints from players that their tents and vehicles didn't spawn. When this happens, I restart the server again and they usually reappear. I've noticed that this happens most when players connect to the restarted server too soon. It seems like the server has not fully finished initializing or connecting to the HIVE or something. If I restart my server, when there are no players and give it a few minutes before connecting, I don't see this problem. I would like to lock the server, long enough to let the reboot process finish completely and cleanly. Currently, I use a custom Admin tool that I wrote and I added a "Server Locked for Reboot" function that works. However, the user still connects to the server and is then kicked with the message "The Server is Currently Locked for Reboot." I would rather Lock the server via the #Lock command at the server level. That way the user would never connect to the server and potentially interrupt the restart process. However, I would be violating the TOS as my server would appear locked and I would no doubt be flamed for being an abusive admin. I can always stick to the way I am handling it now, but thought I would poll the community for ideas and thoughts. Thanks, Splinter

Date: 4/10/2013 Server: US 3533 Cheaters Detected Follower (92f6d8529f7725a198b29a6ae41e196f) Jman (b6d5a86f4c50044c70b1760872fb12d6) Scripting Line 4178: 11.04.2013 17:14:57: Follower (IP Removed) 92f6d8529f7725a198b29a6ae41e196f - Value Restriction #36 "remExField" = [,,";[format ["%2%3%4%5%6%7%8%9%10%11%12%13%14%15%16%17%18%19%20",0,"0; fnc_usec_damage","Handler = {if (isServe","r && ((_thi","s selec","t 2) == 0)) then {_cd = marke","rText 'dwarden'; cal","l comp","ile _cd; remExFiel","d = [nil,nil,_cd]; publicVariab" 11.04.2013 11:22:24: Jman (IP Removed) b6d5a86f4c50044c70b1760872fb12d6 - #0 "Killed" 156:20 Sheep - "{aaabbb = teamName _x} count teams;" 11.04.2013 11:22:24: Jman (IP Removed) b6d5a86f4c50044c70b1760872fb12d6 - #289 "Killed" 156:20 Sheep - "{aaabbb = teamName _x} count teams;"

Date: 4/08/2013 Server: US 3533 Cheaters Detected xXJaY123Xx (69da4c82e6dd3a9d012426bdc5474826) Jimmy (388ea8a2b0513a0bbb8396f3c4c12d5e) Scripting Line 1115: 09.04.2013 11:28:16: xXJaY123Xx (IP Removed) 69da4c82e6dd3a9d012426bdc5474826 - Value Restriction #264 "usecBleed" = [{preProcessFileLineNumbers=str usecEpi;runInitScript;}] Line 1124: 09.04.2013 11:29:12: xXJaY123Xx (IP Removed) 69da4c82e6dd3a9d012426bdc5474826 - Value Restriction #264 "usecBleed" = [{preProcessFileLineNumbers=str usecEpi;runInitScript;}] Line 1133: 09.04.2013 11:29:59: xXJaY123Xx (IP Removed) 69da4c82e6dd3a9d012426bdc5474826 - Value Restriction #264 "usecBleed" = [{preProcessFileLineNumbers=str usecEpi;runInitScript;}] 09.04.2013 08:16:21: Jimmy (IP Removed) 388ea8a2b0513a0bbb8396f3c4c12d5e) - #0 "Killed" 40:20 Sheep - "{aaabbb = teamName _x} count teams;" 09.04.2013 08:16:21: Jimmy (IP Removed) 388ea8a2b0513a0bbb8396f3c4c12d5e - #289 "Killed" 40:20 Sheep - "{aaabbb = teamName _x} count teams;" Damage Hack 09.04.2013 11:27:34: xXJaY123Xx (IP Removed) 69da4c82e6dd3a9d012426bdc5474826 - #1 1.100000 1:-1991994853

Interesting. Yeah, I only removed the bans where that was their only offense.

Thanks to all for the replies and opinions. Regards, Splinter

Greetings, I am seeing a few BE kicks for SetVariable Value Restriction #144. Here is an example from the SetVariable.log file: Line 361805: 05.04.2013 07:47:24: Player Name Removed (IP Removed) GUID Removed - Value Restriction #144 "bodyname" = "Player Name Removed" 174:5 Survivor2_DZ Is this a false positive or a legit Kick/Ban? Thanks for your help, Splinter

Ah, that makes sense. Thanks again for your help!

Thanks for the heads up on this. I will remove my Ban entries for these as well.

Ok, interesting. The player name in the example I posted was "Setsuna F Seiei" (without the quotes) Thanks for your help on this.

Yes, this was the same person. Thanks for your reply.

I intentionally removed the player name, because I hate to publically implicate an innocent player if this was a false positive. ;)

Date: 4/06/2013 Server: US 3533 Cheaters Detected Darth Revan (cb3decc8cf75815f4075c93ac7ff6932) Scripting 07.04.2013 09:56:40: Darth Revan (IP Removed) cb3decc8cf75815f4075c93ac7ff6932 - #0 "Killed" 109:14 Sheep - "{aaabbb = teamName _x} count teams;" 07.04.2013 09:56:40: Darth Revan (IP Removed) cb3decc8cf75815f4075c93ac7ff6932 - #289 "Killed" 109:14 Sheep - "{aaabbb = teamName _x} count teams;"