I already dropped a solution to this a few weeks ago. You can use the game manager within your game and make it so that players have to actually teleport into your game rather than the game being available from the start place.
if it’s to do with remoteevents, detect the request sent per like minute if it’s like 100 or something then kick player
and add min acc age 7 days then enable alt detection for your bans (don’t ban for spamming remotevents only kick them, but if they’re the ones ddosing and you’re sure then ban them and their alts