Master switch for anti-cheat detection and strike scoring. The web panel, live map, player list, bans, and admin actions remain available when this is off.

Server samples position every 250ms. It calculates distance ÷ elapsed time, then compares instant and multi-sample average speed. A position jump beyond the teleport distance in under 2 seconds creates a higher-weight strike. Use tolerance for laggy hosts.

Disabled because terrain height alone cannot distinguish flying from roofs, towers, bridges, and platforms.

Uses authoritative damage events, not client aim angles. It adds a strike when consecutive server hits are faster than the minimum interval, or total hits within a rolling 1-second window exceed the maximum. This detects impossible event rates, not “good aim”.

Compares server-side attacker and victim positions at each hit. It has separate melee and projectile ceilings. Set projectile ceiling above the longest legitimate weapon/mod range.

Looks for sudden inventory growth, bursts of identical non-stackable items, and unusual stack quantities. Natural fruit, stones, ammo, nails, seeds, and money-like types are excluded from the stack heuristic.

Records authoritative health changes. Large instant heals or a significant damage event with no expected health loss are signals only; mods with custom medical systems may need higher values.

On a force-kick only, snapshots the inventory and deletes the kicked entity after disconnect to prevent a lootable ghost. It never scans or deletes entities during normal player login.

Tracks the ratio of headshots to total PvP hits. Aimbots typically sit at 60–95% headshots; legitimate players are far lower. Only player-vs-player hits are counted (AI/animals are excluded to avoid skewing the ratio).

Rapid reconnect is a classic dupe setup vector. Tracks (re)connects in a rolling window and strikes when a player exceeds the configured count. History survives logout so reconnects across disconnects are counted.

Closes the "slow cheater" evasion where strike decay keeps a player under the ban threshold. If a player accrues a large amount of strike score in a short window, escalate directly to ban (or kick if ban is disabled), bypassing the absolute threshold.

Items whose type matches the list below are automatically deleted from a player's inventory and trigger a strike. Use this for known cheat-spawned or debug items. Items are always deleted (even in dry-run) to neutralize the cheat; strikes are gated by dry-run.

When enabled, every would-be strike, kick, and ban is logged with a [DRYRUN] prefix but no kicks or bans are executed. Essential for tuning detection thresholds on a live population without disrupting players. Banned items are still deleted to neutralize cheats.

Each signal adds weighted strike score. Auto-kick disconnects at its threshold; auto-ban adds the Steam64 to the server banlist and disconnects at its threshold. Keep both off while you establish normal behavior.

These control independent local files. Lower values feel more responsive but consume more server time and disk I/O. Runtime settings reload is intentionally fixed at 1500ms and is not configurable.

Script logging is useful for development. File logging powers the webpanel detection history.

Detects items appearing in a player's inventory without a legitimate source.

Flags instant stance changes (prone↔stand) that bypass animation timers.

Detects abnormal FOV zoom values used by ESP/zoom hacks.

Flags sustained fire with no recoil pattern (no-recoil hacks).

Flags hits from impossible angles relative to attacker facing.

Flags abnormal damage-per-hit spikes (damage multiplier hacks).

Flags weapon fire faster than the configured minimum interval.

Flags instant reloads (reload animation bypass).

Flags infinite sprint (stamina not draining while running).

Flags frozen hunger/thirst stats while player is active.

Flags body temperature not changing over time.

Disabled because generic damage does not guarantee a bleeding source in DayZ.

Flags running/sprinting with broken legs.

Flags vehicles exceeding the configured speed limit.

Flags vehicle position jumps exceeding the distance threshold.

Flags vehicles spawned too quickly after the previous one.

Flags instant lockpicks (lockpick animation bypass).

Flags building through walls or at impossible speed.

Flags instant base destruction (raid timer bypass).

Flags negative-price or otherwise exploitative trader transactions.

Flags rapid cargo moves that indicate item duplication.

Flags rapid attachment swaps that indicate duplication.

Flags rapid magazine reloads that indicate duplication.

Flags rapid item drops that indicate duplication.

Flags disconnecting within the combat window after taking or dealing damage.

Disabled because terrain-only height incorrectly flags roofs, towers, bridges, and platforms.

Flags players logging in with more items than the configured maximum.

Steam64 / DayZ PlayerIdentity.GetPlainId() values that bypass anti-cheat strikes and enforcement. This is not a BattlEye GUID list.

Steam64 IDs recognized as server admins (inherits whitelist protection automatically).

Flags names that are too short, too long, or match banned patterns.

Flags invalid Steam64 ID format (must be 17 digits starting with 7656). Uses the built-in identity strike weight.

DayZ 1.29 does not expose remote IPs to Enforce Script. This setting is reserved for the hosted connection service and currently performs no local check.

Reserved for the hosted connection service because local DayZ scripts cannot access player IP addresses.

Flags accounts younger than the minimum age. Off by default (requires Steam API integration).

Flags accounts with less than the minimum playtime. Off by default.

Flags excessive message rate in chat.

Flags banned words/URLs in chat messages.

Flags excessive voice channel usage.

Flags malicious command patterns in chat (e.g. script injection).

Flags repetitive action patterns indicating macro/bot usage.

Disabled because being stationary alone is not evidence of resource farming.

Flags suspiciously high counts of identical ground items near a player.

Disabled locally. Normal persistence callbacks are not tampering evidence; this requires external file validation.

Flags chat messages that impersonate admin/server log prefixes.

Generic numeric ranges are disabled because CF, COT, Trader, and other legitimate mods use high RPC IDs.

Flags players using mods not in the allowed list. Off by default.