Confluence crash every time after startup a while

[sara qian]

My confluence was working fine previously. But from one of day, it would auto crashed once startup for a while.

• I had double check the memory is enough(also enabled swap space), there is also a gc log file generated when startup, not see any "out of memory" statement.
• No change on server side.
• No matter I startup confluence with root or confluence user, it could up for first few mins, and then would be down automatically.

Here is the last error in cataline startup log, it always down after this exception:

21-Apr-2019 21:37:36.894 WARN [ContainerBackgroundProcessor[StandardEngine[Standalone]]] org.apache.catalina.valves.StuckThreadDetectionValve.notifyStuckThreadDetected Thread [http-nio-8090-exec-10] (

id=[239]) has been active for [69,018] milliseconds (since [4/21/19 9:36 PM]) to serve the same request for [http://118.89.48.157:8090/rest/tinymce/1/macro/preview] and may be stuck (configured thresh

old for this StuckThreadDetectionValve is [60] seconds). There is/are [1] thread(s) in total that are monitored by this Valve and may be stuck.

java.lang.Throwable

        at java.net.SocketInputStream.socketRead0(Native Method)

        at java.net.SocketInputStream.socketRead(SocketInputStream.java:116)

        at java.net.SocketInputStream.read(SocketInputStream.java:171)

        at java.net.SocketInputStream.read(SocketInputStream.java:141)

        at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)

        at java.io.BufferedInputStream.read(BufferedInputStream.java:265)

        at sun.net.ftp.impl.FtpClient.readServerResponse(FtpClient.java:420)

        at sun.net.ftp.impl.FtpClient.readReply(FtpClient.java:497)

        at sun.net.ftp.impl.FtpClient.issueCommand(FtpClient.java:539)

        at sun.net.ftp.impl.FtpClient.close(FtpClient.java:1131)

        at sun.net.www.protocol.ftp.FtpURLConnection$FtpInputStream.close(FtpURLConnection.java:130)

        at sun.net.www.MeteredStream.close(MeteredStream.java:166)

        at sun.net.www.MeteredStream.justRead(MeteredStream.java:93)

        at sun.net.www.MeteredStream.read(MeteredStream.java:135)

        at sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:284)

        at sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:326)

        at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:178)

        at java.io.InputStreamReader.read(InputStreamReader.java:184)

        at java.io.BufferedReader.fill(BufferedReader.java:161)

        at java.io.BufferedReader.read1(BufferedReader.java:212)

        at java.io.BufferedReader.read(BufferedReader.java:286)

        at org.apache.velocity.runtime.parser.VelocityCharStream.FillBuff(VelocityCharStream.java:161)

        at org.apache.velocity.runtime.parser.VelocityCharStream.readChar(VelocityCharStream.java:257)

        at org.apache.velocity.runtime.parser.VelocityCharStream.BeginToken(VelocityCharStream.java:192)

        at org.apache.velocity.runtime.parser.ParserTokenManager.getNextToken(ParserTokenManager.java:4130)

        at org.apache.velocity.runtime.parser.Parser.getToken(Parser.java:3356)

        at org.apache.velocity.runtime.parser.node.SimpleNode.jjtOpen(SimpleNode.java:103)

        at org.apache.velocity.runtime.parser.JJTParserState.openNodeScope(JJTParserState.java:81)

        at org.apache.velocity.runtime.parser.Parser.process(Parser.java:279)

        at org.apache.velocity.runtime.parser.Parser.parse(Parser.java:105)

        at org.apache.velocity.runtime.RuntimeInstance.parse(RuntimeInstance.java:1130)

[Daniel Eads]

Hi Sara,

Based on the line in your log file about the macro preview, it looks like your instance has been affected by a malware attack. I've written an article about the security advisories we released several weeks ago and the steps needed to clean up after a malware attack. I'd recommend working through that article, and let me know here if you run in to any specific trouble.

Best,
Daniel | Atlassian Support

[sara qian]

Given already affected, if reinstall could resolve the issue? Or if need additional clean up in advance?

And if there is a simpler way to upgrade/reinstall inside when I able to login confluence for a short while? It's quite trouble to uninstall original one and reinstall/config from beginning

[sara qian]

i am at version 6.11.1

[Daniel Eads]

Hey Sara,

You'd need to do some cleanup of malware separately - simply upgrading Confluence won't clean up if your instance has been infected. The article I linked above has instructions for how to detect if malware is on your system and guidelines on how to go about cleaning it up.

You don't need to uninstall your Confluence to do an upgrade. Running the installer for the new version (Windows has a graphical installer, Linux uses a .bin file that guides you through the upgrade on the command line) will upgrade your existing installation/data without having to uninstall it first. We have an article to help you through the upgrade process. In short, given that you have a 10-user license that is valid, you can download the latest version at https://www.atlassian.com/software/confluence/download and use the installer to help you with the upgrade.

Cheers,
Daniel

[Yoga Reddy {Appfire}]

Hi @sara qian 

If you are using Confluence version 6.x version please follow the this article

Thanks

Yoga