Jump to content
DayZ Forums
GnaWz

Setpos.log - Do I have any hackers?

By GnaWz, in Mod Servers & Private Hives

Recommended Posts

GnaWz    1

GnaWz
Posted

I've deleted their GUIDs and IPs.

This is on a Lingor server.

17.09.2012 01:59:29: [DK]Pitt - 20:1740 [3877,7198,81]

17.09.2012 13:09:20: Andre69l - 2:218 [929,9237,11]

17.09.2012 13:38:16: Kingly - 2:236 [931,9237,11]

17.09.2012 17:07:42: Penti - 4:879 [0,0,-17]

17.09.2012 17:07:42: Penti - 4:879 [0,0,-17]

17.09.2012 17:07:42: Penti - 4:879 [0,0,-17]

17.09.2012 17:07:42: Penti - 4:879 [0,0,-17]

17.09.2012 17:45:26: _RaZoR_ - 2:326 [0,0,-17]

17.09.2012 17:45:26: _RaZoR_ - 2:326 [0,0,-17]

17.09.2012 18:03:02: [DK]Jomer - 2:529 [0,0,-17]

17.09.2012 21:22:10: Fraser - 16:242 [0,0,-17]

17.09.2012 21:24:25: grandpa - 16:317 [0,0,-17]

17.09.2012 21:39:55: Momo - 16:408 [0,0,-17]

17.09.2012 21:39:55: Momo - 16:408 [0,0,-17]

17.09.2012 21:57:14: [DK]Don89 - 2:248 [0,0,-17]

17.09.2012 21:57:14: [DK]Don89 - 2:248 [0,0,-17]

17.09.2012 21:57:14: [DK]Don89 - 2:248 [0,0,-17]

17.09.2012 22:52:13: fredor - 35:416 [0,0,-17]

18.09.2012 00:37:46: JonhaXIV - 84:234 [368,1963,20]

18.09.2012 12:18:35: oxonium - 2:356 [0,0,-17]

18.09.2012 12:18:35: oxonium - 2:356 [0,0,-17]

18.09.2012 15:44:43: oxonium - 2:547 [0,0,-17]

18.09.2012 15:44:43: oxonium - 2:547 [0,0,-17]

18.09.2012 15:44:43: oxonium - 2:547 [0,0,-17]

18.09.2012 15:44:43: oxonium - 2:547 [0,0,-17]

18.09.2012 15:45:51: Macis - 2:501 [0,0,-17]

18.09.2012 15:45:51: Macis - 2:501 [0,0,-17]

Share this post

Link to post
Share on other sites

symptom    185

symptom
Posted

Doesn't sy anything about hacks there. Try posting your remoteexe.log. Anyone hacking will be in there.

Share this post

Link to post
Share on other sites

GnaWz    1

GnaWz
Posted

Here's the remoteexec.log with GUID and IPs removed.

Anything fishy here?

09.09.2012 13:20:04: Budapest - #0 "

if (isServer) then {

_object = createVehicle ['UH1H_DZ', [8153.81, 8224.76, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 6577.04, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_"

09.09.2012 13:20:04: Budapest - #3 "

if (isServer) then {

_object = createVehicle ['UH1H_DZ', [8153.81, 8224.76, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 6577.04, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_"

16.09.2012 06:33:42: [OM6] Legendary Fox - #0 "if (name vehicle player == TTT5NamePl) then {_xcompiled = compile TTT5derCode;call _xcompiled;};"

16.09.2012 06:33:42: [OM6] Legendary Fox - #8 "if (name vehicle player == TTT5NamePl) then {_xcompiled = compile TTT5derCode;call _xcompiled;};"

17.09.2012 21:37:20: [Caedes] Crashdown - #38 "[this] spawn BIS_Effects_AirDestruction"

17.09.2012 21:37:20: [Caedes] Crashdown - #40 "[this] spawn BIS_Effects_AirDestruction"

18.09.2012 10:55:13: NOT FINE :"( - #38 "[this] spawn BIS_Effects_AirDestruction"

18.09.2012 10:55:13: NOT FINE :"( - #40 "[this] spawn BIS_Effects_AirDestruction"

18.09.2012 10:55:15: NOT FINE :"( - #38 "[this, 7.95122, 3120.3]spawn BIS_Effects_AirDestructionStage2"

18.09.2012 10:55:15: NOT FINE :"( - #40 "[this, 7.95122, 3120.3]spawn BIS_Effects_AirDestructionStage2"

18.09.2012 10:55:15: NOT FINE :"( - #38 "[this, 7.95122, 3120.3,false,true]spawn BIS_Effects_Burn"

18.09.2012 10:55:15: NOT FINE :"( - #40 "[this, 7.95122, 3120.3,false,true]spawn BIS_Effects_Burn"

Share this post

Link to post
Share on other sites

Magotchi    74

Magotchi
Posted

Setpos.log records instances of people using the "setpos" scripting command (teleporting). Normally most, if not all, entries in it therefore represent hackers, but I don't know much about Lingor, private hives, or modified mission files.

Share this post

Link to post
Share on other sites

Torndeco (DayZ)    46

Torndeco (DayZ)
Posted (edited)

Running a vilayer lingor private server myself atm with the anti-cheat mod turned on.

Noticed afew regulars turning up on the logs aswell with 0,0,-17 as co-ords...

Atm i am ignoring those entries till i find out why...

as for the other entriesi am banning away atm.

Just dont forget to look at all the logs first .i.e publicvariable.log remoteexec.log scripts.log etc....

Edited by Torndeco

Share this post

Link to post
Share on other sites

stokvis    24

stokvis
Posted

Here's the remoteexec.log with GUID and IPs removed.

Anything fishy here?

09.09.2012 13:20:04: Budapest - #0 "

if (isServer) then {

_object = createVehicle ['UH1H_DZ', [8153.81, 8224.76, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 6577.04, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_"

09.09.2012 13:20:04: Budapest - #3 "

if (isServer) then {

_object = createVehicle ['UH1H_DZ', [8153.81, 8224.76, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 6577.04, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_"

16.09.2012 06:33:42: [OM6] Legendary Fox - #0 "if (name vehicle player == TTT5NamePl) then {_xcompiled = compile TTT5derCode;call _xcompiled;};"

16.09.2012 06:33:42: [OM6] Legendary Fox - #8 "if (name vehicle player == TTT5NamePl) then {_xcompiled = compile TTT5derCode;call _xcompiled;};"

17.09.2012 21:37:20: [Caedes] Crashdown - #38 "[this] spawn BIS_Effects_AirDestruction"

17.09.2012 21:37:20: [Caedes] Crashdown - #40 "[this] spawn BIS_Effects_AirDestruction"

18.09.2012 10:55:13: NOT FINE :"( - #38 "[this] spawn BIS_Effects_AirDestruction"

18.09.2012 10:55:13: NOT FINE :"( - #40 "[this] spawn BIS_Effects_AirDestruction"

18.09.2012 10:55:15: NOT FINE :"( - #38 "[this, 7.95122, 3120.3]spawn BIS_Effects_AirDestructionStage2"

18.09.2012 10:55:15: NOT FINE :"( - #40 "[this, 7.95122, 3120.3]spawn BIS_Effects_AirDestructionStage2"

18.09.2012 10:55:15: NOT FINE :"( - #38 "[this, 7.95122, 3120.3,false,true]spawn BIS_Effects_Burn"

18.09.2012 10:55:15: NOT FINE :"( - #40 "[this, 7.95122, 3120.3,false,true]spawn BIS_Effects_Burn"

This is for sure a hacker (createvehicle UH1H is a chopper, the airdestruction part is him crashing it).

Share this post

Link to post
Share on other sites

BTK (DayZ)    12

BTK (DayZ)
Posted
Setpos.log records instances of people using the "setpos" scripting command (teleporting). Normally most, if not all, entries in it therefore represent hackers

setPos is being exeuted in a lot of legit cases. "Pickup flare" and "Pitch tent" for example. It can easily show up 10 times in a row just because someone is trying to pitch his tent. Make sure to check createvehicle.log as well.

Teleport is easy to spot by looking at the coordinates.

I don't think that setPosATL and setPosASL are being logged yet, so there are easy workarounds for teleport. :(

Share this post

Link to post
Share on other sites

excelsior    20

excelsior
Posted (edited)

Check coordinates against time and make a ruling that way.

Edited by ExcelsiorDDZ

Share this post

Link to post
Share on other sites

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
Go To Topic Listing Mod Servers & Private Hives
×