[woot]

The attack doesn't affect the server at all, just the querying mechanism. If you disable connection cookies (conncookies) your server gets filled up with fake players. Disabling cookie logging does not fix the problem, it's not the server that's overloading but merely querying of server information doesn't work properly anymore..

By now the attack is coming from pretty much every IP range, so there's no point in blocking them, looks like spoofed IPs too..