July 2, 20206 yr Hello kind community, I hope you can help me with some problems I've been having with my server. I've setup my unraid server a week ago now and it keeps behaving oddly. I don't quite understand why but it often goes unreachable in any way. From my pc I can't access any files, the webgui is not reachable and no content is available on plex. I find it quite strange since I thought it was a network issue, but on my router it's clearly visible. I set it to be on static ip both on the server and also directly by reserving the iPv4 adress on the router. Every other setting I left as it was. I have run a few cicles in memtest and it passed on every test, so I don't think that's the problem. I've read of faulty powersupplies being the problem but I don't think that's the case (i do want to try to swap out the psu of the server with my main pc's one but I would have to move my server and since it's tricky I feel to lazy to do it). I also installed the common problems plugin but it didn't tip me off to anything. I'll leave a copy of the log history and diagnostics. friariello-syslog-20200702-1237.zip friariello-diagnostics-20200702-1437.zip
July 2, 20206 yr Community Expert On mobile now so haven't looked at Diagnostics yet. For future reference, Diagnostics already includes syslog.
July 2, 20206 yr Quote Jul 2 05:18:11 Friariello emhttpd: unclean shutdown detected Did you initiate the shutdown (unclean)? Model name: AMD Ryzen 7 1700 Eight-Core Processor Have you looked at the BIOS and the Power Supply Idle Control? It should get set to "typical" https://forums.unraid.net/topic/46802-faq-for-unraid-v6/page/2/?tab=comments#comment-819173
July 2, 20206 yr Author 46 minutes ago, Squid said: Did you initiate the shutdown (unclean)? Yes I did. I tried just pushing the powerbutton (1 sec) but it wouldn't respond... 47 minutes ago, Squid said: Have you looked at the BIOS and the Power Supply Idle Control? It should get set to "typical" No, I haven't. I'll look it up and see if it's set correctly
July 3, 20206 yr Author So... I wanted to wait for the problem to occur again and here I am. I did set the Power Supply Idle Control to typical (it was set to auto). I also set it up to send me notification for the system status on my phone every hour through telegram and it did it all day. This is the last warning I got: Friariello: Notice [FRIARIELLO] - array health report [FAIL] warning 1593796801 Array has 2 disks (including cache) Disk 1 - WDC_WD101EMAZ-11G7DA0_VCG960UN (sdb) - active 48 C (disk is hot) [NOK] Cache - PM951_NVMe_SAMSUNG_256GB_S29NNXAH304339 (nvme0n1) - active 44 C [OK] Parity has not been checked yet 20 minutes after this I tried to listen to some music on plex but the server was once again unreachable as I described it before...
July 3, 20206 yr Author Again, just in case it could help I'll post you the diagnostics. Unfortunatly i'm not very litterate in programming so I don't really understand what could be helpfull on there but I hope you can make the best out of it in other word, non so più che pesci prendere Thanks again for the help : ) friariello-diagnostics-20200703-2011.zip Edited July 3, 20206 yr by Ishpettore
July 3, 20206 yr Community Expert Your are being hacked! Why is your server on the internet! Close all ports immediately! Jul 3 10:43:07 Friariello sshd[6906]: Invalid user honey from 144.172.79.10 port 33020 ... Jul 3 10:49:02 Friariello sshd[12544]: Received disconnect from 222.186.30.218 port 48752:11: [preauth] ... Jul 3 10:53:18 Friariello sshd[16617]: Received disconnect from 218.92.0.219 port 26035:11: [preauth] ... Jul 3 10:56:15 Friariello sshd[19342]: Received disconnect from 222.186.30.167 port 38090:11: [preauth] ... Jul 3 11:03:23 Friariello sshd[26482]: Received disconnect from 222.186.15.158 port 58877:11: [preauth] ... https://www.abuseipdb.com/check/144.172.79.10 https://www.abuseipdb.com/check/222.186.30.218 https://www.abuseipdb.com/check/218.92.0.219 https://www.abuseipdb.com/check/222.186.30.167 https://www.abuseipdb.com/check/222.186.15.158
July 3, 20206 yr Community Expert And the first syslog you posted has similar. Probably by now it has been going on for 2 days with hundreds of more examples.
July 4, 20206 yr Author Okay so I closed ssh and deleted its the portforward. I think this had to be a friend of mine who I let access the server remotely but forgot to close ssh. I think it should be fine now, I don't see anyone else trying to access the server now... Thank goodness it's closed now. I don't think anyone has actually managed to get in. Thank you very much, I can't express my gratefullness
July 4, 20206 yr Community Expert 4 hours ago, Ishpettore said: forgot to close ssh. It should have never been open. You must use a VPN to access your server outside your LAN. Unraid has the WireGuard VPN builtin.
July 4, 20206 yr Author 4 hours ago, trurl said: It should have never been open. noted. I surely won't reopen it. 4 hours ago, trurl said: Unraid has the WireGuard VPN builtin. I'll look into it once I manage to fix that unreachable problem. Could have the ssh been the reason for that?
Archived
This topic is now archived and is closed to further replies.