For some reason, I locked a team and stuff, it had one player slot, it was supposed to be a team for working on the map (you have jets and spawn with tools instead of having to pick them up) and two players somehow joined it. They knew that they shouldn't have been able to, but they did anyways. They couldn't have done anything to spawn, since I didn't trust them, but still, this is a problem! I can't get the console stuff since I'm running a Dedicated server and have no idea how they did it.
They also joined a locked team with a max playercount of 0, it's got a preferred playercount of 30. It's just made to spawn bots with custom loadouts. Auto sort weight was 0 and auto-sort was off anyways. I was AFK at the time but looked through the chat. One of them is a regular on the server, their names were Knight Logarius and Feared_Cookies so if you happen to see them ingame you can question them about it I guess.
I have several different addons that may have done this... They may have used events, I'm going to go check. Either they didn't use events or hid it well. And by well I mean it's not super obvious, and I'm not gonna check everything's events. I'm sorry but that's all I know. For now I'm removing non-player teams.