It's an incorrect implementation of the protocol, yes. That message should only be sent from the server to the client, and the server should not take any action

It's an incorrect implementation of the protocol, yes. That message should only be sent from the server to the client, and the server should not take any action (besides dropping the connection) when it's received.