July 21, 20205 yr Hi I have a problem with one of the HDDs. I noticed an "x" on the disk (photo) I don't know what happened, can you help me diagnose the problem?
July 21, 20205 yr Author 5 minutes ago, johnnie.black said: Please post the diagnostics: Tools -> Diagnostics unraid-diagnostics-20200721-1329.zip
July 21, 20205 yr Community Expert First thing you need to do is to make your server not internet facing, now let me see if I can find the disk errors in the middle of all those login attempts.
July 21, 20205 yr Community Expert Can't find them, either missed them or they are not there since there are several hours missing because of all the log spam, disk looks healthy, would recommend replacing/swapping cables to rule them out and rebuild on top.
July 22, 20205 yr Author I changed the SATA cable, changed the SATA ports on the board, changed to a different power cable. I did changes with all cables between all disks, unfortunately this one disk does not work all the time.
July 22, 20205 yr Author I'm doing this test, but it will take a few hours - SMART extended self-test
July 23, 20205 yr Author Of course, the SMART extended self-test did very well. (this test lasted several hours) So I deleted this disk from Array and decided to treat it now with Preclear. For now, it is on step 2 out of 6 steps. (Pretclear has been doing a long time too) Waiting for it to finish, then I will add the disk to Array. Hope it helps. Edited July 23, 20205 yr by ZiemaF
July 23, 20205 yr What do you mean with you deleted the disk from the array ? Is the disk still emulated? Otherwise I hope you have backups of the data that was on disk 3! Did you take @johnnie.black's advice and made sure your Unraid Interface is not facing the internet?
July 23, 20205 yr Author Preaclear is not finished doing yet. One disk failure will not result in data loss (I hope)
July 23, 20205 yr Community Expert 1 hour ago, ZiemaF said: One disk failure will not result in data loss (I hope) Depends on your answer to this question 4 hours ago, Kevek79 said: Is the disk still emulated?
July 24, 20205 yr Author Yes, the entire drive was emulated. Pretclear was successful. I have now reconnected this disk to Array and the data-rebuild has started. The data-rebuild process itself will now take over 5 hours. I'll let you know when it ends.
July 24, 20205 yr Author 15 hours ago, Kevek79 said: What do you mean with you deleted the disk from the array ? Is the disk still emulated? Otherwise I hope you have backups of the data that was on disk 3! I didn't delete it, I just disconnected it. But the disk was emulated. I disconnected from the Array so that the disk was unassigned then I could make Preclear on that disk. Edited July 24, 20205 yr by ZiemaF
July 24, 20205 yr Author On 7/21/2020 at 2:46 PM, johnnie.black said: First thing you need to do is to make your server not internet facing, now let me see if I can find the disk errors in the middle of all those login attempts. I didn't do that, maybe some advice, I don't have much experience in UNRAID. I also have to log in to the server remotely.
July 24, 20205 yr You should never expose your Unraid UI to the internet. Not even if you have to remotely connect to the machine. You should use a vpn connection. Wireguard on Unraid Check the blogpost under the link above to get familiar with the Unraid Wireguard implementation.
July 24, 20205 yr Community Expert 6 hours ago, ZiemaF said: I also have to log in to the server remotely. I didn't look at the logs before since you had already been warned. Close all ports on your router immediately and/or take your server out of the DMZ on your router. The internet is full of bots that automatically look for things to attack and will attack relentlessly. Just a sample from your syslog. There are likely hundreds of others and it will continue until you take your server off the internet: Jul 21 13:23:16 UNRAID sshd[27160]: Disconnected from invalid user devopsuser 54.37.44.95 port 34858 [preauth] Jul 21 13:23:16 UNRAID sshd[27288]: Accepted none for adm from 5.188.86.212 port 57365 ssh2 Jul 21 13:23:20 UNRAID sshd[27352]: Failed password for root from 222.186.175.183 port 48002 ssh2 Jul 21 13:23:20 UNRAID sshd[27401]: Accepted none for adm from 5.188.86.168 port 43027 ssh2 ... Jul 21 13:23:24 UNRAID sshd[27529]: Accepted none for adm from 5.188.62.14 port 38206 ssh2 ... Jul 21 13:23:41 UNRAID sshd[28073]: Accepted none for adm from 45.227.255.207 port 58710 ssh2 https://www.abuseipdb.com/check/54.37.44.95 https://www.abuseipdb.com/check/5.188.86.212 https://www.abuseipdb.com/check/222.186.175.183 https://www.abuseipdb.com/check/5.188.86.168 https://www.abuseipdb.com/check/5.188.62.14 https://www.abuseipdb.com/check/45.227.255.207 As you can see from those links, you are being attacked from all over the world. @ZiemaF Fix this NOW!!!
July 28, 20205 yr Author On 7/24/2020 at 10:25 AM, Kevek79 said: You should use a vpn connection. Wireguard on Unraid I will apply this solution, thank you for the information. The disk that was cleaned with Preclear I added it back to the Array and it rebuilt. HDD has been working for several days without a problem.
July 29, 20205 yr Happy to hear that the rebuild worked and you did not loose any data. @ZiemaF: Did you tackle the "facing the internet" issue? You really should!
Archived
This topic is now archived and is closed to further replies.