[1254871688]

https://imgur.com/a/TI2JMN3


https://imgur.com/a/O1iIaWs

a lot of ips fake players join server to take your slot
server always 64/64 normal players can not join
these fakes players can not use any GetClient in sourcemod on them so you can not kick them use sm_kick

#include <sourcemod>

public OnPluginStart()
{
	HookEvent("player_connect", OnPlayerConnect);
	HookEvent("player_connect_full", OnPlayerConnectFull);
}
	
public OnPlayerConnect(Handle:event, const String:name[], bool:dontBroadcast)
{
	new ID = GetEventInt(event, "userid");
	new Client = GetClientOfUserId(ID);
	decl String:SteamID[32];
	GetEventString(event, "networkid", SteamID, 32);
	PrintToServer("OnPlayerConnect//////////////// client:%i(#%i)<%s> name:%s", Client, ID, SteamID, name);
}
public OnPlayerConnectFull(Handle:event, const String:name[], bool:dontBroadcast)
{
	new ID = GetEventInt(event, "userid");
	new Client = GetClientOfUserId(ID);
	PrintToServer("OnPlayerConnectFull//////////////// client:%i(#%i)", Client, ID);
}

public bool:OnClientConnect(client, String:rejectmsg[], maxlen)
{
	PrintToServer("OnClientConnect: %s////////////////", rejectmsg);
	return true;
}
public OnClientConnected(client)
{
	decl String:SteamID[32];
	GetClientAuthString(client, SteamID, 32);	
	PrintToServer("OnClientConnected//////////////// client:%i<%s>", client, SteamID);
}
public OnClientPutInServer(client)
{
	PrintToServer("OnClientPutInServer////////////////");
}
public OnClientDisconnect(client)
{
	PrintToServer("OnClientDisconnect////////////////");
}
public OnClientDisconnect_Post(client)
{
	PrintToServer("OnClientDisconnect_Post////////////////");
}
public OnClientAuthorized(client)
{
	decl String:SteamID[32];
	GetClientAuthString(client, SteamID, 32);	
	PrintToServer("OnClientAuthorized//////////////// client:%i<%s> bot:%i", client, SteamID, IsFakeClient(client));
}
public Action:OnClientPreAdminCheck(client)
{
	PrintToServer("OnClientPreAdminCheck////////////////");
}
public OnClientPostAdminFilter(client)
{
	PrintToServer("OnClientPostAdminFilter////////////////");
}
public OnClientPostAdminCheck(client)
{
	PrintToServer("OnClientPostAdminCheck////////////////");
}

the fake player can only trigger HookEvent("player_connect", OnPlayerConnect);
no OnClientPutInServer no OnClientAuthorized ....


need some help

[1254871688]

they use random ip 、nick and random steamid
i don;t know how the attacker do it
the fake players passed steam lobby id 、A2S Challenge and in console command "status" you will see them always on "connecting"

[Bacardi]

sm_cvar sv_timeout 65

65 seconds is default.

You could try lower value, but it not fix problem

[backwards]

Add me on discord backwards#8236 would love to solve this

[1254871688]

this is a new attack not normal a2s or qconnect attack srcds proxy can not fix it

[1254871688]

Originally Posted by Bacardi sm_cvar sv_timeout 65 65 seconds is default. You could try lower value, but it not fix problem

yes it not fix attack still 64/64

[Ryan2]

Very curious how someone can get 64 bots into a server without using an actual CSGO instance (I assume)

[1254871688]

Originally Posted by Ryan2 Very curious how someone can get 64 bots into a server without using an actual CSGO instance (I assume)

send a lot of fake connecting request to server

[CryWolf]

sv_timeout 30 may help but it mai affect also players with low connection.

I would create a fail2ban rule, must investigate more, till then you can ban those classes but first verify if it's a normal ip or a fake ip.

[1254871688]

Originally Posted by CryWolf sv_timeout 30 may help but it mai affect also players with low connection. I would create a fail2ban rule, must investigate more, till then you can ban those classes but first verify if it's a normal ip or a fake ip.

even sv_timeout 1 can not fix this because they always keep join
and it should be real IP because you need a chanllenge int to take server slot