Ishpettore Posted July 2, 2020 Posted July 2, 2020 Hello kind community, I hope you can help me with some problems I've been having with my server. I've setup my unraid server a week ago now and it keeps behaving oddly. I don't quite understand why but it often goes unreachable in any way. From my pc I can't access any files, the webgui is not reachable and no content is available on plex. I find it quite strange since I thought it was a network issue, but on my router it's clearly visible. I set it to be on static ip both on the server and also directly by reserving the iPv4 adress on the router. Every other setting I left as it was. I have run a few cicles in memtest and it passed on every test, so I don't think that's the problem. I've read of faulty powersupplies being the problem but I don't think that's the case (i do want to try to swap out the psu of the server with my main pc's one but I would have to move my server and since it's tricky I feel to lazy to do it). I also installed the common problems plugin but it didn't tip me off to anything. I'll leave a copy of the log history and diagnostics. friariello-syslog-20200702-1237.zip friariello-diagnostics-20200702-1437.zip Quote
trurl Posted July 2, 2020 Posted July 2, 2020 On mobile now so haven't looked at Diagnostics yet. For future reference, Diagnostics already includes syslog. Quote
Squid Posted July 2, 2020 Posted July 2, 2020 Quote Jul 2 05:18:11 Friariello emhttpd: unclean shutdown detected Did you initiate the shutdown (unclean)? Model name: AMD Ryzen 7 1700 Eight-Core Processor Have you looked at the BIOS and the Power Supply Idle Control? It should get set to "typical" https://forums.unraid.net/topic/46802-faq-for-unraid-v6/page/2/?tab=comments#comment-819173 Quote
Ishpettore Posted July 2, 2020 Author Posted July 2, 2020 46 minutes ago, Squid said: Did you initiate the shutdown (unclean)? Yes I did. I tried just pushing the powerbutton (1 sec) but it wouldn't respond... 47 minutes ago, Squid said: Have you looked at the BIOS and the Power Supply Idle Control? It should get set to "typical" No, I haven't. I'll look it up and see if it's set correctly Quote
Ishpettore Posted July 3, 2020 Author Posted July 3, 2020 So... I wanted to wait for the problem to occur again and here I am. I did set the Power Supply Idle Control to typical (it was set to auto). I also set it up to send me notification for the system status on my phone every hour through telegram and it did it all day. This is the last warning I got: Friariello: Notice [FRIARIELLO] - array health report [FAIL] warning 1593796801 Array has 2 disks (including cache) Disk 1 - WDC_WD101EMAZ-11G7DA0_VCG960UN (sdb) - active 48 C (disk is hot) [NOK] Cache - PM951_NVMe_SAMSUNG_256GB_S29NNXAH304339 (nvme0n1) - active 44 C [OK] Parity has not been checked yet 20 minutes after this I tried to listen to some music on plex but the server was once again unreachable as I described it before... Quote
Ishpettore Posted July 3, 2020 Author Posted July 3, 2020 (edited) Again, just in case it could help I'll post you the diagnostics. Unfortunatly i'm not very litterate in programming so I don't really understand what could be helpfull on there but I hope you can make the best out of it in other word, non so più che pesci prendere Thanks again for the help : ) friariello-diagnostics-20200703-2011.zip Edited July 3, 2020 by Ishpettore Quote
trurl Posted July 3, 2020 Posted July 3, 2020 Your are being hacked! Why is your server on the internet! Close all ports immediately! Jul 3 10:43:07 Friariello sshd[6906]: Invalid user honey from 144.172.79.10 port 33020 ... Jul 3 10:49:02 Friariello sshd[12544]: Received disconnect from 222.186.30.218 port 48752:11: [preauth] ... Jul 3 10:53:18 Friariello sshd[16617]: Received disconnect from 218.92.0.219 port 26035:11: [preauth] ... Jul 3 10:56:15 Friariello sshd[19342]: Received disconnect from 222.186.30.167 port 38090:11: [preauth] ... Jul 3 11:03:23 Friariello sshd[26482]: Received disconnect from 222.186.15.158 port 58877:11: [preauth] ... https://www.abuseipdb.com/check/144.172.79.10 https://www.abuseipdb.com/check/222.186.30.218 https://www.abuseipdb.com/check/218.92.0.219 https://www.abuseipdb.com/check/222.186.30.167 https://www.abuseipdb.com/check/222.186.15.158 Quote
trurl Posted July 3, 2020 Posted July 3, 2020 And the first syslog you posted has similar. Probably by now it has been going on for 2 days with hundreds of more examples. Quote
Ishpettore Posted July 4, 2020 Author Posted July 4, 2020 Okay so I closed ssh and deleted its the portforward. I think this had to be a friend of mine who I let access the server remotely but forgot to close ssh. I think it should be fine now, I don't see anyone else trying to access the server now... Thank goodness it's closed now. I don't think anyone has actually managed to get in. Thank you very much, I can't express my gratefullness Quote
trurl Posted July 4, 2020 Posted July 4, 2020 4 hours ago, Ishpettore said: forgot to close ssh. It should have never been open. You must use a VPN to access your server outside your LAN. Unraid has the WireGuard VPN builtin. Quote
Ishpettore Posted July 4, 2020 Author Posted July 4, 2020 4 hours ago, trurl said: It should have never been open. noted. I surely won't reopen it. 4 hours ago, trurl said: Unraid has the WireGuard VPN builtin. I'll look into it once I manage to fix that unreachable problem. Could have the ssh been the reason for that? Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.