[Doodil]

wouldn't a flood-detect plugin be easy to implement? AddCommandListener for the command "status" and a array that stores for each client how often he executed "status", ones a client uses "status" 1000 times (so no innocent ppl are affected) you permaban him for flooding... no matter how many steam-accs he has, each one will be banned after 0.5 seconds(assuming 2600 status-requests per second like you said in your initial post)

[blue zebra]

Try this. It's works for me from the console command:

#include <sourcemod>
#pragma semicolon 1

public OnPluginStart()
{
    RegConsoleCmd("status", Command_Block);
}

public Action:Command_Block(client, args)
{
    return Plugin_Stop;
}

public Action:Command_JoinTeam(client_index, args)
{
    if (GetClientTeam(client_index) > 1)
        return Plugin_Handled;
    return Plugin_Continue;
}

Not my work. I only use this and works well for me. Game: CSS

Ps.: console console console log entry seems like come from HLSW. If yes, the "attacker" know your rcon password. Change that!

[Zephyrus]

Originally Posted by blue zebra Try this. It's works for me from the console command: #include <sourcemod> #pragma semicolon 1 public OnPluginStart() { RegConsoleCmd("status", Command_Block); } public Action:Command_Block(client, args) { return Plugin_Stop; } public Action:Command_JoinTeam(client_index, args) { if (GetClientTeam(client_index) > 1) return Plugin_Handled; return Plugin_Continue; } Not my work. I only use this and works well for me. Game: CSS Ps.: console console console log entry seems like come from HLSW. If yes, the "attacker" know your rcon password. Change that!

PHP Code:

public Action:Command_JoinTeam(client_index, args)
{
    if (GetClientTeam(client_index) > 1)
        return Plugin_Handled;
    return Plugin_Continue;
} 


that whole part is useless junk code and has nothing to do with it

[thesixhalcon]

I noticed about the junk code, but the rest of the code seems to be valid (I didn't remember about programming on sourcemod). Thanks.
It seems that the server is attacked by console or "HLSW", but the server has the RCON port closed, as I said on a post a few time ago, so I discard the HLSW attack.

I'll give a try to this "fix".

Thanks again.

[Bacardi]

Can't block command status and players should allow use that to know what kind server they play...

It's likely one of your plugins. <Console>

*edit or custom map , if there really vulgar map developers

[Smarmy]

Probably someone just looping an alias so that no other client gets access to the status command. I believe name change hackers use this to make it harder to identify and ban them.

[Bacardi]

wtf... when we are able to block command "status" ? Because couldn't about year ago. Or do I remember wrong.

Anyway, command returns always client index 0.
Either player or from server console input.

[GoD-Tony]

A little more info here: https://forums.alliedmods.net/showthread.php?t=180939

[Nolongerinthegame]

I believe it could be a server mod, or even a map. For whatever reason, some maps execute server commands, and status could be one of those.

[Ja-Forces]

* version found in depths of Internet

PHP Code:

// How many times allowed to type the status command.
// -
// Default: "3"
// Minimum: "2.000000"
// Maximum: "10.000000"
sm_antispam_status "3"

// Ping (0: off, 1: on).
// -
// Default: "1"
// Minimum: "0.000000"
// Maximum: "1.000000"
sm_show_ping "1"

// Show Status (0: to all, 1: admins, 2: only your status).
// -
// Default: "2"
// Minimum: "0.000000"
// Maximum: "2.000000"
sm_show_status "2"