Anti-cheat
Monitor suspicious movement and gameplay signals with configurable detection controls and a searchable event trail.
infiSTAR FOR DAYZAnti-cheat protection and a live administration workspace for your DayZ server, built to keep the operator in charge.
Protect your community and manage the details from one browser-based workspace. Install the server-only mod, connect your server, and keep the operational picture close.
Monitor suspicious movement and gameplay signals with configurable detection controls and a searchable event trail.
Bring player activity, server chat, map context, detections, and administration tools into a single selected-server view.
Review players, manage bans, send commands, and configure server controls with access scoped to your licensed installation.
Actual screenshots from a connected DayZ server. Open an image to inspect the full workspace.
One-time payment for the displayed duration. No automatic renewal.
Billing is exactly as shown: €5 / 1 day, €10 / 7 days, €20 / 30 days, €80 / 180 days, €150 / 365 days, or €300 for lifetime access. License validity starts when the purchased key is activated on a server.
Illustrative rounded comparisons, not additional billing plans. The monthly comparison uses four weeks (28 days); the month license itself lasts 30 days.
| License | Price paid once | Comparison |
|---|---|---|
| Lifetime | 300€ | One-time payment |
| 1 year | 150€ | 12.50€/month · 2.88€/week |
| 6 months | 80€ | 13.33€/month · 3.08€/week |
| 1 month | 20€ | 5.00€/week · 0.71€/day |
| 1 week | 10€ | 1.42€/day |
| 1 day | 5€ | — |
DayZ Admin Webinterface

DayZ SA account registration
Create your DayZ SA customer account. Email and customer name are unique — each can be registered only once. You can sign in right after registering.
Already registered? Log in
Select a duration and see the exact one-time EUR price before secure checkout. No automatic renewal. You can buy a key before adding your first server.
One-time payment. The license validity starts when you activate its purchased key on a server.
| Serial | Status | Time left | Started | Expires | Length | Assigned server |
|---|---|---|---|---|---|---|
| Loading licenses… | ||||||
Loading servers…
For a new installation, select your server above and follow these steps. No Agent or client mod is required.
@infiSTAR to the server root.direct-enrollment.txt to the actual <profiles>/infiSTAR/ directory. Keep it private.@infiSTAR to your existing -serverMod list, start DayZ and allow telemetry time.Select a server to check its reported connection.
Enrollment observations unavailable.
The portal cannot verify that files were copied or startup arguments were set. A recent heartbeat does not prove every feature works.
Full setup, host guidance and safe update instructions
Generate a small summary for the selected server. It excludes serials, tokens, passwords, IP addresses, logs and player data. Review it before sharing; the server ID identifies your installation.
A separate client mod is experimental and not required for this setup. It is not available for download here.
| Player | Steam64 | AC score | Strikes | Position | Actions |
|---|---|---|---|---|---|
| Waiting for player telemetry. | |||||
Loading recent player history…
| Name | Steam64 | Last seen | State |
|---|---|---|---|
| Loading recorded players… | |||
| Steam64 | Reason | Created | Actions |
|---|---|---|---|
| Waiting for banlist telemetry. | |||
Reports are reviewed before they appear as community reports on other servers. Your server name is never shown to other operators.
| Steam64 | Reason | Status | Submitted | |
|---|---|---|---|---|
| No ban reports submitted from this server. | ||||
Approved reports submitted by other server operators. Reporter identity is not disclosed.
| Steam64 | Report | Approved |
|---|---|---|
| No approved community reports. | ||
Choose a player for a direct message, or use an exact @Playername prefix. Global messages go to all online players.
Select an arsenal entry.
| Command / details | Target | Queued by | Queued | Status | Delay |
|---|---|---|---|---|---|
| No commands yet. | |||||
Waiting for automation telemetry.
No Discord webhook configured for this server.
Waiting for settings telemetry.
Choose how this portal alerts you when a player requests an admin. These settings are saved only for your account in this browser.
| Customer | Server | Status | License | Agent | Heartbeat |
|---|---|---|---|---|---|
| Loading hosted servers… | |||||
Clears current telemetry and searchable player profile/name indexes. Immutable commands, results, snapshots, audit records, player events, anti-cheat events, and evidence remain retained. A running agent repopulates telemetry on its next heartbeat.
Select a hosted server.
Platform access is audited and independent of customer ownership. Customer and shared-user accounts cannot view or use this panel.
The manifest is untrusted and removable. The recorded SHA-256 matches only the exact whole ZIP issued at the recorded time; it is not proof of the origin of an extracted PBO.
Not looked up.
| Customer | Server | State | License | Last seen | Actions |
|---|---|---|---|---|---|
| Platform inventory is available only to SUPERADMIN. | |||||
| Customer / server / key | Usage / lifecycle | Expires | Actions |
|---|---|---|---|
| Platform inventory is available only to SUPERADMIN. | |||
Enter license duration in hours (168 = 7 days); assign an existing customer ID or leave blank for an unassigned key. Each successful click creates one separate key. The issued serial is shown once and must be delivered securely before creating another.
These feeds contain only recorded platform or workspace actions, not complete history. Platform actor names reflect current records. Details are restricted; search applies to the loaded page.
Not loaded.
| Time / ID | Actor | Action | Scope | Details |
|---|
| DB ID | UID | Alive | Serialized data |
|---|
| Name | Steam64 | Saved | K/D | Health | Items |
|---|
Score = anti-cheat strike points (teleport/speed/dupe/etc). Starts at 0. Clear score resets that counter. Kick disconnects the player via the game bridge.
| Name | Steam64 | AC Score | Strikes | Pos | Actions |
|---|---|---|---|---|---|
| No player snapshot yet. Start DayZ with infiSTAR mod. | |||||
| Steam64 | Meta |
|---|
Writes to server banlist and queues a ban action for the game bridge.
Send as the platform operator. Messages are queued and may be visible in server and game logs.
Only listed operations can be queued; availability and execution depend on the server agent.
Password is read only from the configured environment variable.
Manage roles, reset passwords, and revoke access.
Changing your password signs out your current session.
Master switch for anti-cheat detection and strike scoring. The web panel, live map, player list, bans, and admin actions remain available when this is off.
One switch covers on-foot and vehicle teleports. Fixed internal policy checks position jumps of at least 100 metres in samples shorter than 1 second, allowing twice the greater of 300 m/s or observed motion plus a 50 metre margin. Long gaps, falling and vehicle transitions receive protection. Ordinary speed never adds strikes. No movement thresholds are adjustable. Requires the updated server PBO; review evidence rather than treating a detection as proof of cheating.
Create one route with an optional Start and Target. Leave either side empty to ignore it while “Both ends must match” is off. A teleport must match Start at its origin and Target at its destination. Radius means the allowed distance around that coordinate, in metres.
Use this only for a known addon whose teleports always have a predictable distance. A matching jump is logged as an authorized normal teleport with your comment, but adds no strike or score.
Disabled because terrain height alone cannot distinguish flying from roofs, towers, bridges, and platforms.
Uses authoritative damage events, not client aim angles. It adds a strike when consecutive server hits are faster than the minimum interval, or total hits within a rolling 1-second window exceed the maximum. This detects impossible event rates, not “good aim”.
Compares server-side attacker and victim positions at each hit. It has separate melee and projectile ceilings. Set projectile ceiling above the longest legitimate weapon/mod range.
Looks for sudden inventory growth, bursts of identical non-stackable items, and unusual stack quantities. Natural fruit, stones, ammo, nails, seeds, and money-like types are excluded from the stack heuristic.
Records authoritative health changes. Large instant heals or a significant damage event with no expected health loss are signals only; mods with custom medical systems may need higher values.
On a force-kick only, snapshots the inventory and deletes the kicked entity after disconnect to prevent a lootable ghost. It never scans or deletes entities during normal player login.
Tracks the ratio of headshots to total PvP hits. Aimbots typically sit at 60–95% headshots; legitimate players are far lower. Only player-vs-player hits are counted (AI/animals are excluded to avoid skewing the ratio).
Rapid reconnect is a classic dupe setup vector. Tracks (re)connects in a rolling window and strikes when a player exceeds the configured count. History survives logout so reconnects across disconnects are counted.
Closes the "slow cheater" evasion where strike decay keeps a player under the ban threshold. If a player accrues a large amount of strike score in a short window, escalate directly to ban (or kick if ban is disabled), bypassing the absolute threshold.
Items whose type matches the list below are automatically deleted from a player's inventory and trigger a strike. Use this for known cheat-spawned or debug items. Items are always deleted (even in dry-run) to neutralize the cheat; strikes are gated by dry-run.
When enabled, every would-be strike, kick, and ban is logged with a [DRYRUN] prefix but no kicks or bans are executed. Essential for tuning detection thresholds on a live population without disrupting players. Banned items are still deleted to neutralize cheats.
Each signal adds weighted strike score. Auto-kick disconnects at its threshold; auto-ban adds the Steam64 to the server banlist and disconnects at its threshold. Turn off Dry Run before enabling live automatic actions. Keep both actions off while you establish normal behavior.
These control independent local files. Lower values feel more responsive but consume more server time and disk I/O. Runtime settings reload is intentionally fixed at 1500ms and is not configurable.
Auto prefers the external agent and switches to direct PBO HTTPS only when the agent becomes stale. Process control remains external unless explicitly enabled on the agent host.
Script logging is useful for development. File logging powers the webpanel detection history.
Detects abnormal FOV zoom values used by ESP/zoom hacks.
Flags sustained fire with no recoil pattern (no-recoil hacks).
Flags hits from impossible angles relative to attacker facing.
Flags abnormal damage-per-hit spikes (damage multiplier hacks).
Flags weapon fire faster than the configured minimum interval.
Flags instant reloads (reload animation bypass).
Flags infinite sprint (stamina not draining while running).
Flags frozen hunger/thirst stats while player is active.
Flags body temperature not changing over time.
Disabled because generic damage does not guarantee a bleeding source in DayZ.
Flags instant lockpicks (lockpick animation bypass).
Flags building through walls or at impossible speed.
Flags instant base destruction (raid timer bypass).
Flags negative-price or otherwise exploitative trader transactions.
Repeated use is not duplication. Updated PBO ignores these legacy fields. Use opt-in Detachment Observation for bounded before/after evidence, never punishment.
Reloading the same magazine is normal reuse. Updated PBO leaves this string-only hook inert; these legacy fields cannot enable scoring or punishment.
Repeat detachments are not proof of duplication. This build never scores, strikes, or punishes them, even with legacy settings enabled. Reliable copy-creation evidence is unavailable; no drop duplication confirmation is performed. Older PBOs require an update to remove this heuristic.
Optional evidence only, off by default. Keeps two local pre-event snapshots and investigates repeated non-weapon detachments after 2 seconds. Requires the original object, a new distinct same-type object and an aggregate increase. Findings are unexplained item increases, NOT confirmed duplication or player responsibility, with no automatic punishment. Known grants suppress findings; untracked grants and transfers cannot be excluded.
15 m radius; equipment, hands, nested inventories, nearby players, items, containers and vehicles. Maximum 32 tracked players, 48 nodes, depth 6, 128 inspected objects and 32 nearby item/vehicle roots per capture. Nominal 2-second player cadence; globally at most 4 captures/second with cooperative 4 ms scan budgets. Busy servers may miss baselines. Incomplete/stale baselines suppress findings. One investigation/player/minute and at most one emitted observation/server/5 seconds. Requires updated server PBO; not global coverage.
Flags disconnecting within the combat window after taking or dealing damage.
Disabled because terrain-only height incorrectly flags roofs, towers, bridges, and platforms.
Logs only new inventory-item batches. Trader RPCs and portal arsenal grants are labeled when confirmed; ground/container pickup, crafting, and other server actions remain unattributed. Never creates strikes.
Steam64 / DayZ PlayerIdentity.GetPlainId() values that bypass anti-cheat strikes and enforcement. This is not a BattlEye GUID list.
Steam64 IDs recognized as server admins (inherits whitelist protection automatically).
Flags names that are too short, too long, or match banned patterns.
Flags invalid Steam64 ID format (must be 17 digits starting with 7656). Uses the built-in identity strike weight.
DayZ 1.29 does not expose remote IPs to Enforce Script. This setting is reserved for the hosted connection service and currently performs no local check.
Reserved for the hosted connection service because local DayZ scripts cannot access player IP addresses.
Flags accounts younger than the minimum age. Off by default (requires Steam API integration).
Flags accounts with less than the minimum playtime. Off by default.
Flags excessive message rate in chat.
Flags banned words/URLs in chat messages.
Flags excessive voice channel usage.
Flags malicious command patterns in chat (e.g. script injection).
Flags repetitive action patterns indicating macro/bot usage.
Disabled locally. Normal persistence callbacks are not tampering evidence; this requires external file validation.
Flags chat messages that impersonate admin/server log prefixes.
Flags players using mods not in the allowed list. Off by default.
Saved under profiles/infiSTAR/web/settings.txt. The server reloads it every 1.5 seconds.
Local development recovery: stops all DayZDiag processes, deletes the offline character database, then restarts the server. World loot/storage is retained.
This panel reads/writes files under the DayZ -profiles folder:
infiSTAR/detections.loginfiSTAR/bans.txtinfiSTAR/web/players.json (written by game mod)infiSTAR/web/actions.jsonl (web → game queue)No client-side “secret AC”. Admins use this UI; the game server remains authoritative.
infistar.de · local panel for DayZ SA dev.


