Unfortunately, some people have recently been spamming my title with fake players to try to get me to the free 100k player limit and get it deleted. I was able to stop a few attacks by blocking a few endpoints (login with switch, ios, and android device ids) then using segments to get rid of the players that they had already spammed. However, I have now hit a roadblock. My game (Unity by the way) authenticates by just logging in with the unique device identifier as a custom ID. And now, someone has started spamming players using custom IDs as well. I can't really use the same approach as the other attacks by blocking endpoints since blocking this one would cause the game to not authenticate unless I changed something in the game. They are spamming at a fairly slow rate since it seems to be from only one ip and they can only use the one endpoints, so I probably have a decent amount of time, but if anyone could provide advice on stopping this attack it would be appreciated.
