Xiphos

Hello Unraid Community, I am experiencing several recurring issues with my Unraid server and am seeking assistance to resolve them. Here are the details: SMB Shares Inaccessibility: My SMB shares randomly become inaccessible after a few days, requiring a server reboot to fix. bzfirmware Checksum Error: Every time I perform a clean reboot, I encounter a bzfirmware checksum error and have to manually re-drop the necessary files onto the USB drive from the Unraid website while retaining the config folder. GUI Malfunctions: The GUI sometimes fails to display webpages correctly, necessitating a reboot which then leads to the bzfirmware checksum error above. I get the internal 500 server error nginix standard message. CLI Diagnostics Issue: Attempting to get diagnostics from the CLI results in a "bus error." sometimes. SSH and Direct Login Issues: SSH login via Putty provides no prompts, and direct login with a monitor, mouse, and keyboard results in a blank screen after login, preventing any command entry. Nvidia P2000 GPU Issue: My server has Docker containers for qBittorrent, Radarr, Sonarr, Bazarr, SABnzbd, and Plex. I use an Nvidia P2000 GPU for Plex transcoding. Recently, I encountered the following log messages: Aug 9 15:21:38 Tower kernel: NVRM: GPU 0000:01:00.0: RmInitAdapter failed! (0x22:0x56:878) Aug 9 15:21:38 Tower kernel: NVRM: GPU 0000:01:00.0: rm_init_adapter failed, device minor number 0 The GPU is no longer detected in Unraid. Additionally, I have reformatted and checked the integrity of the USB drive, confirming it is in 100% health. I have also checked the motherboard, and everything appears to be in good condition. I don't have a lot of plugins, just the main ones like Nvidia driver, UPS NUT settings, Community Applications, Appdata Backup, and Auto USB Reboot. These issues are making it difficult to manage my server. Any help or suggestions would be greatly appreciated. I am getting seriously sick of all these issues that keep happening, my UNRAID server is basic nothing crazy, just a media server with a Windows VM and GPU installed and some plugins yet it keeps crashing and corrupting itself and now I am unable to safely reboot it via GUI, terminal or physically at the host. I am also limited in experience with Linux so any help is appreciated team. Also I'm hesistant to just cut the power in-case I have data loss, any advice please? Thank you! Warm regards. EDIT: So my server was totally unresponsive, I could not access web gui, SSH or physically at the server with monitor and keyboard it was not responding to commands so I had to just kill the power. It booted back up fine, I was on Unraid 6.12.6 a bit old didn't realise newer versions out it did not notify me, so I incrementally upgraded it to 6.12.11 now latest stable so hopefully that can help. I have deleted a few more plugins too. Server is stable again but usually this cycle of issues repeats itself after a few days. I've attached a photo of my plugins.

Please see my IPS logs: https://ibb.co/6RD2wXV I'm quite worried as I know how severe log4j is, but what concerns me even more is the source of these attempted attacks is coming internally from my network and not the public WAN IP so does that mean I've already been compromised? I have an Unraid server on 192.168.1.20 with a few docker containers and my only containers that have port forwards on them is Plex and qBittorent. My USG is the 192.168.1.1 IP address My IPS is turned right up to the max and it's the first time I've seen any of these types of threats, I did allow P2P category under threat management for seeding torrents but that's it. Would appreciate absolutely any advice and I'm hoping that these are false positives but how can I tell if they are or not? Thanks guys I've gone through IPS logs over last 2 months and the 15th October is the first time I've started getting these IPS events. More IPS logs where the source is my USG? The coloured out IPs in blue is my WAN IP - https://ibb.co/LC6JdkF I did have Nessus container on but I hadn't played with it for months/can't remember setting a schedule up for it to do vulnerabiltiy scanning, plus these IPS logs say the attacks were spread over a period of 1 hour so I doubt it's that Since then I've deleted all my port forwards and I've shut down the entire Unraid box, my plan was to isolate it on a separate VLAN and block inbound/outbound traffic and run Clam AV on it maybe? I've got about 32TB of data on it so backing it up somewhere else will be a pain and restoring again. I'm really praying these are false positives in my USG but can never take a chance, I don't have much linux experience either, so what else should I do guys to make sure my entire Unraid box is not compromised? I have a VM on it but it had a differnt IP which was 192.168.1.170 I'm a bit scared to turn the box back on again, but I want to at least formulate an action plan and if you guys could assist me I would greatly apppreciate it! I had the docker auto update applications plugin as well installed every night updating my containers? I just don't understand how Plex and qBittorent were the only containers that had port forwards on it and they are apparently not succeptible to log4j Should I just keep it offline and plug in a monitor and keyboard into the Unraid and go through the logs that way if I can? Or can I post support logs here? Sorry guys I was actually sick in my stomach last night after seeing this and shaking so bad. Hope it's false positives.. Cheers, Xiphos