US 1560 Battleye antihax ban (object access flooding)

[velyse (DayZ) 22]

joined up us 1560 with a couple friends, was in the middle of cherno... took down a barbed wire, headed for the military tents. Shot a zombie in the head, started crawling across a road and got this ban message. wtf?

[(OCN)Vortech 65]

joined up us 1560 with a couple friends, was in the middle of cherno... took down a barbed wire, headed for the military tents. Shot a zombie in the head, started crawling across a road and got this ban message. wtf?

DayZ Anti-Hax is an automated banning solution currently in development http://dayzmod.com/forum/index.php?/topic/73460-dayz-anti-hax-a-very-simple-server-side-console-application-for-automatically-banning-hackers-in-dayz/. As it's in development there is definitely the possibility for false-positives. I'd recommend you do two things.. First contact an administrator, a quick search on these forums turns up Attridge(UGLY58)_US1560 (http://dayzmod.com/forum/index.php?/user/1010-attridgeugly58-us1560/). I'd PM him and ask him to look at the logs so that he may figure out what happened. Then I'd direct him to this thread so he can represent his server. You should ask him to contact the Anti-Hax dev and/or post in the thread to inform them of the possible false= positive.

Good luck and be sure to keep us updated.

[fuzzy4ever 22]

Bumping a 2 day old post to say this - Was just banned for a server for this exact same thing, it happened when I was saving a helicopter. I saved it three times and when I scrolled to save it again, I was banned. I've always saved vehicles 10 times just in case. The 'ol gutman-mentality. Based on what happened to me and what the ban is labeled as, it seems like if you access an object to many times to quickly, you'll get banned. I'm not sure how this could be related to any sort of hack though. Feel free to enlighten me!

[ugly58 0]

No PM but found this anyway.

I will look into it.

Please provide me by PM your in game name or Player ID so I can search for the incident.

Edited August 29, 2012 by Attridge(UGLY58)_US1560

[mtuckner 46]

Reviving an old topic. I'm getting a few of these on my server. How can I tell when I look into the logs if it was something hinky going on, or just a false positive?

[cwc_shadow 70]

@Super Tuck: To find out why a player was banned for DayZ AntiHax reasons, check the DayZ AntiHax logfile. It will mention the player GUID, the reason for the ban and the timestamp and name of the logfile, where the incident occured. For example:

01/09/2012 05:24:08 - Banned GUID on pass #1 for Object Access Flooding (31.08.2012 12:50:31: createvehicle.log)

Then you can open the createvehicle.log and search for that timestamp & GUID to find:

31.08.2012 13:29:46: Divaness (82.199.102.182:2304) de24d30c941c0c7d9055750ac142bd83 - #0 "GrenadeHandTimedWest" 222:352 0:0 [11835,12374,225] [0,0,0]

31.08.2012 13:29:46: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:353 0:0 [11818,12373,226] [0,0,0]

31.08.2012 13:29:47: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:354 0:0 [11818,12377,226] [0,0,0]

31.08.2012 13:29:47: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:355 0:0 [11827,12373,225] [0,0,0]

31.08.2012 13:29:48: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:356 0:0 [11820,12381,226] [0,0,0]

31.08.2012 13:29:49: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:357 0:0 [11832,12384,226] [0,0,0]

31.08.2012 13:29:49: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:358 0:0 [11821,12364,225] [0,0,0]

31.08.2012 13:29:49: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:359 0:0 [11817,12379,226] [0,0,0]

31.08.2012 13:29:50: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:360 0:0 [11832,12369,225] [0,0,0]

.

. [goes on for hundreds of more lines!]

.

31.08.2012 14:15:04: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:1388 0:0 [10460,2594,84] [0,0,0]

31.08.2012 14:15:06: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:1389 0:0 [10457,2599,84] [0,0,0]

31.08.2012 14:15:10: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:1390 0:0 [10455,2571,84] [0,0,0]

31.08.2012 14:15:12: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:1391 0:0 [10442,2582,84] [0,0,0]

31.08.2012 14:15:14: Playername (IP) GUID - #0 "GrenadeHandTimedWest" 222:1392 0:0 [10454,2581,84] [0,0,0]

To find out if it was "hinky", use common sense. Someone throwing 400 grenades is a hacker. Someone spawning with 4 identical backpacks is not necessarily and it could be related to connection problems. We had that case recently and if you only find that you shouldn't ban for it, just get suspicious and keep investigating. I hope this helps you.

Edited September 12, 2012 by System98

[DayZGeneration 62]

Ive got this, Everyone joining gets this issue, Even me and its my server. Any fix?