Actions and flags

What oxb does when it detects something: the action per detection (warn, kick, ban) and the flag system that decides how many reports are needed before punishing.


The action of each detection#

Every detection that has a switch also has an action. It is on the Configuration screen, next to the option:

ActionWhat happens
WarnRecords a warning (does not kick or ban). It appears in Warns and in the logs. It is ideal to test a new detection.
KickRemoves the player from the server with a message.
BanBans them with evidence. It is the default action.

If Settings → Enable ban system is off, everything that would be a ban becomes a kick.

Flags: do not punish for a single report#

Many detections can fire because of a network glitch or a script of your server. That is why oxb does not punish on the first report of most of them: it counts flags. A detection punishes when the same player accumulates N reports of it in 90 seconds; until then the report is held.

FlagsFor which detectionsExamples
1 (immediate)The report is a fact, not a suspicion, or the client already filtered it with its own strikes.Forbidden projectile, weapon, vehicle, ped, object, explosion or particle; noclip; freecam; Lua menu; magneto; fake and explosive bullets.
2Spawns and events seen by the server and weapon cheats.Illegal spawn of vehicles, peds and objects; giving or removing weapons; aimbot; silent aim; infinite ammo.
3Movement and vehicle heuristics that can be lag or collisions.Speedhack, super jump, no ragdoll, invisibility, teleport in vehicle, speed or handling modifiers.
4The noisiest ones: health and combat statistics.Ignored damage, no headshot, invincibility, teleport, spectate, night vision, stamina.

Unambiguous reports (bypass attempt, oxb Stop, attempt to crash the server, spoofer, known executors, NUI DevTools) are punished on the first one, without flags.

When a script of your server explains it#

If one of your resources (installed with oxb) has just healed, teleported, given a weapon or created an entity for that player, oxb drops the detection of that family for about 15 seconds. That way a legitimate /revive or teleport does not count as a cheat. Injection detections are never excused.

The full list, with the flags of each one, is in the list of detections.

Last updated: November 11, 2026