Server behaving oddly


Recommended Posts

Hello kind community, I hope you can help me with some problems I've been having with my server. 

I've setup my unraid server a week ago now and it keeps behaving oddly.

I don't quite understand why but it often goes unreachable in any way. From my pc I can't access any files, the webgui is not reachable and no content is available on plex. I find it quite strange since I thought it was a network issue, but on my router it's clearly visible. I set it to be on static ip both on the server and also directly by reserving the iPv4 adress on the router.  Every other setting I left as it was.

 

I have run a few cicles in memtest and it passed on every test, so I don't think that's the problem. I've read of faulty powersupplies being the problem but I don't think that's the case (i do want to try to swap out the psu of the server with my main pc's one but I would have to move my server and since it's tricky I feel to lazy to do it).

 

I also installed the common problems plugin but it didn't tip me off to anything.

 

I'll leave a copy of the log history and diagnostics.

friariello-syslog-20200702-1237.zip friariello-diagnostics-20200702-1437.zip

Link to comment
46 minutes ago, Squid said:

Did you initiate the shutdown (unclean)?

Yes I did. I tried just pushing the powerbutton (1 sec) but it wouldn't respond...

47 minutes ago, Squid said:

Have you looked at the BIOS and the Power Supply Idle Control?  It should get set to "typical"

No, I haven't. I'll look it up and see if it's set correctly

Link to comment

So...

I wanted to wait for the problem to occur again and here I am.

I did set the Power Supply Idle Control to typical (it was set to auto). I also set it up to send me notification for the system status on my phone every hour through telegram and it did it all day.

 

This is the last warning I got: 

Friariello: Notice [FRIARIELLO] - array health report [FAIL]
warning
1593796801
Array has 2 disks (including cache)
Disk 1 - WDC_WD101EMAZ-11G7DA0_VCG960UN (sdb) - active 48 C (disk is hot) [NOK]
Cache - PM951_NVMe_SAMSUNG_256GB_S29NNXAH304339 (nvme0n1) - active 44 C [OK]

Parity has not been checked yet

 

20 minutes after this I tried to listen to some music on plex but the server was once again unreachable as I described it before...

Link to comment

Your are being hacked! Why is your server on the internet! Close all ports immediately!

Jul  3 10:43:07 Friariello sshd[6906]: Invalid user honey from 144.172.79.10 port 33020
...
Jul  3 10:49:02 Friariello sshd[12544]: Received disconnect from 222.186.30.218 port 48752:11:  [preauth]
...
Jul  3 10:53:18 Friariello sshd[16617]: Received disconnect from 218.92.0.219 port 26035:11:  [preauth]
...
Jul  3 10:56:15 Friariello sshd[19342]: Received disconnect from 222.186.30.167 port 38090:11:  [preauth]
...
Jul  3 11:03:23 Friariello sshd[26482]: Received disconnect from 222.186.15.158 port 58877:11:  [preauth]
...

https://www.abuseipdb.com/check/144.172.79.10

 

https://www.abuseipdb.com/check/222.186.30.218

 

https://www.abuseipdb.com/check/218.92.0.219

 

https://www.abuseipdb.com/check/222.186.30.167

 

https://www.abuseipdb.com/check/222.186.15.158

Link to comment

Okay so I closed ssh and deleted its the portforward.

I think this had to be a friend of mine who I let access the server remotely but forgot to close ssh.


I think it should be fine now, I don't see anyone else trying to access the server now...


Thank goodness it's closed now. I don't think anyone has actually managed to get in.

Thank you very much, I can't express my gratefullness

 

Link to comment
4 hours ago, trurl said:

It should have never been open.

noted. I surely won't reopen it.

 

4 hours ago, trurl said:

Unraid has the WireGuard VPN builtin.

I'll look into it once I manage to fix that unreachable problem. Could have the ssh been the reason for that?

 

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.