Is this an attack on the server or what?

[Bishop_G]

Hello community, I may be sharing this in the wrong place but I need help. When someone logs into my server, the things I will share below occur and the players in the game are exiting the game with a TIMED OUT. I banned this person before but he enters from different IPs and serials. Is this an attack? How can I prevent this? Look at these errors. None of these codes are from my resources but I don't understand how this happens.

I see these debugs when he trying to enter server: 

[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event computers:on, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event computers:on, but event is not added serverside  [DUP x199]
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event uncuff, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event uncuff, but event is not added serverside  [DUP x19]
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event item:move:save, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event es-system:acceptDeath, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event killmebyped, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event es-system:acceptDeath, but event is not added serverside  [DUP x9]
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event killmebyped, but event is not added serverside  [DUP x9]
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event computers:on, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event computers:on, but event is not added serverside  [DUP x199]
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event uncuff, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event uncuff, but event is not added serverside  [DUP x19]
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event awardPlayer, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event awardPlayer, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event AnimationSet, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event sendLocalMeAction, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event sendLocalMeAction, but event is not added serverside
[2025-05-01 18:54:40] ERROR: Client (FascinatedCrab2) triggered serverside event vehlib:deleteVehicle, but event is not added serverside
[2025-05-01 18:54:46] ERROR: Client (FascinatedCrab2) triggered serverside event vehlib:deleteVehicle, but event is not added serverside  [DUP x38133]

 

[AngelAlpha]

You can use this event for protected invalid trigger

[Bishop_G]

 Thank you AngelAlpha 

[IIYAMA]

21 hours ago, Bishop_G said:

Is this an attack? How can I prevent this?

It is indeed a kind of attack. It means that the player is able execute clientside-code on demand.

 

The attacker is triggering 'known generic events' which might be handled by the server. The ones that are unknown are in your logs, the ones that are known and trigger able are not.

But that does not mean that the ones that did trigger didn't cause unwanted results. You might want to consider to restart the resources, just to make sure there is no memory leak.

 

The event which AngelAlpha mentioned can indeed help with detecting that kind of attacks. 

As an extend you can also add a honeypot, which in this case are 'unkown' events for your server but know for other servers. When a player uses this kind of attack again, you can ban them automatic. You might want take a closer look at your logs for candidates (for example money related).

There is also this event:
https://wiki.multitheftauto.com/wiki/OnPlayerTriggerEventThreshold

 

But be careful with automating things, always test these kind of stuff or you might accidentally nuke your own player base.

[Bishop_G]

 

Thanks for your information, IIYAMA!