Code: Select all
java.nio.channels.SocketChannel[connected local=/10.16.0.122:3821 remote=/115.
78.201.230:14239]
[ WARNING ][ SmartFoxServer.dispatchEvent ] Unknown event type: , Disconnecting
java.nio.channels.SocketChannel[connected local=/10.16.0.122:3821 remote=/110.
4.172.96:46483]
[ WARNING ][ SmartFoxServer.readIncomingMessages ] Malformed input: java.nio.ch
rset.MalformedInputException: Input length = 1. From: /76.67.6.30:58938
[ WARNING ][ SmartFoxServer.readIncomingMessages ] Malformed input: java.nio.ch
rset.MalformedInputException: Input length = 1. From: /76.67.6.30:58938
[ WARNING ][ SmartFoxServer.readIncomingMessages ] Malformed input: java.nio.ch
rset.MalformedInputException: Input length = 1. From: /173.94.138.112:50520
[ WARNING ][ SmartFoxServer.dispatchEvent ] Unknown event type: 29, Disconnecti
g: java.nio.channels.SocketChannel[connected local=/10.16.0.122:3821 remote=/45
33.128.25:10154]
[ WARNING ][ SmartFoxServer.dispatchEvent ] Unknown event type: , Disconnecting
java.nio.channels.SocketChannel[connected local=/10.16.0.122:3821 remote=/190.
99.87.247:50419]
[ WARNING ][ SmartFoxServer.dispatchEvent ] Unknown event type: true, Disconnec
ing: java.nio.channels.SocketChannel[connected local=/10.16.0.122:3821 remote=/
10.54.172.96:36418]
[ WARNING ][ SmartFoxServer.readIncomingMessages ] Malformed input: java.nio.ch
rset.MalformedInputException: Input length = 1. From: /160.178.208.50:2003
[ WARNING ][ SmartFoxServer.readIncomingMessages ] Malformed input: java.nio.ch
rset.MalformedInputException: Input length = 1. From: /76.67.6.30:58938
I believe it was an attack as I have not changed anything for the past 6 months. However this attack is weird that it's causing the server to get confused. People reported to me that they whispered someone that they didn't intend to send (most likely server gets confused to whom to send it) and people equipping random items and random lag spikes and dropped messages (chat message's not sent).
I have upgraded the server up to "SmartFoxServer Pro 1.6.19 patch" which I believe should've fixed the issue but it's not disconnecting the malformed inputs from what I see, rather only disconnect unknown event types.
I'm using JRE 10 instead of the default java run time that comes with the sfs, and server uses Java while the client uses AS3.
How can I stop this attack?