ZiemaF Posted July 21, 2020 Posted July 21, 2020 Hi I have a problem with one of the HDDs. I noticed an "x" on the disk (photo) I don't know what happened, can you help me diagnose the problem? Quote
JorgeB Posted July 21, 2020 Posted July 21, 2020 Please post the diagnostics: Tools -> Diagnostics Quote
ZiemaF Posted July 21, 2020 Author Posted July 21, 2020 5 minutes ago, johnnie.black said: Please post the diagnostics: Tools -> Diagnostics unraid-diagnostics-20200721-1329.zip Quote
JorgeB Posted July 21, 2020 Posted July 21, 2020 First thing you need to do is to make your server not internet facing, now let me see if I can find the disk errors in the middle of all those login attempts. Quote
JorgeB Posted July 21, 2020 Posted July 21, 2020 Can't find them, either missed them or they are not there since there are several hours missing because of all the log spam, disk looks healthy, would recommend replacing/swapping cables to rule them out and rebuild on top. Quote
ZiemaF Posted July 22, 2020 Author Posted July 22, 2020 I changed the SATA cable, changed the SATA ports on the board, changed to a different power cable. I did changes with all cables between all disks, unfortunately this one disk does not work all the time. Quote
ZiemaF Posted July 22, 2020 Author Posted July 22, 2020 I'm doing this test, but it will take a few hours - SMART extended self-test Quote
ZiemaF Posted July 23, 2020 Author Posted July 23, 2020 (edited) Of course, the SMART extended self-test did very well. (this test lasted several hours) So I deleted this disk from Array and decided to treat it now with Preclear. For now, it is on step 2 out of 6 steps. (Pretclear has been doing a long time too) Waiting for it to finish, then I will add the disk to Array. Hope it helps. Edited July 23, 2020 by ZiemaF Quote
Kevek79 Posted July 23, 2020 Posted July 23, 2020 What do you mean with you deleted the disk from the array ? Is the disk still emulated? Otherwise I hope you have backups of the data that was on disk 3! Did you take @johnnie.black's advice and made sure your Unraid Interface is not facing the internet? Quote
ZiemaF Posted July 23, 2020 Author Posted July 23, 2020 Preaclear is not finished doing yet. One disk failure will not result in data loss (I hope) Quote
trurl Posted July 23, 2020 Posted July 23, 2020 1 hour ago, ZiemaF said: One disk failure will not result in data loss (I hope) Depends on your answer to this question 4 hours ago, Kevek79 said: Is the disk still emulated? Quote
ZiemaF Posted July 24, 2020 Author Posted July 24, 2020 Yes, the entire drive was emulated. Pretclear was successful. I have now reconnected this disk to Array and the data-rebuild has started. The data-rebuild process itself will now take over 5 hours. I'll let you know when it ends. Quote
ZiemaF Posted July 24, 2020 Author Posted July 24, 2020 (edited) 15 hours ago, Kevek79 said: What do you mean with you deleted the disk from the array ? Is the disk still emulated? Otherwise I hope you have backups of the data that was on disk 3! I didn't delete it, I just disconnected it. But the disk was emulated. I disconnected from the Array so that the disk was unassigned then I could make Preclear on that disk. Edited July 24, 2020 by ZiemaF Quote
ZiemaF Posted July 24, 2020 Author Posted July 24, 2020 On 7/21/2020 at 2:46 PM, johnnie.black said: First thing you need to do is to make your server not internet facing, now let me see if I can find the disk errors in the middle of all those login attempts. I didn't do that, maybe some advice, I don't have much experience in UNRAID. I also have to log in to the server remotely. Quote
Kevek79 Posted July 24, 2020 Posted July 24, 2020 You should never expose your Unraid UI to the internet. Not even if you have to remotely connect to the machine. You should use a vpn connection. Wireguard on Unraid Check the blogpost under the link above to get familiar with the Unraid Wireguard implementation. Quote
trurl Posted July 24, 2020 Posted July 24, 2020 6 hours ago, ZiemaF said: I also have to log in to the server remotely. I didn't look at the logs before since you had already been warned. Close all ports on your router immediately and/or take your server out of the DMZ on your router. The internet is full of bots that automatically look for things to attack and will attack relentlessly. Just a sample from your syslog. There are likely hundreds of others and it will continue until you take your server off the internet: Jul 21 13:23:16 UNRAID sshd[27160]: Disconnected from invalid user devopsuser 54.37.44.95 port 34858 [preauth] Jul 21 13:23:16 UNRAID sshd[27288]: Accepted none for adm from 5.188.86.212 port 57365 ssh2 Jul 21 13:23:20 UNRAID sshd[27352]: Failed password for root from 222.186.175.183 port 48002 ssh2 Jul 21 13:23:20 UNRAID sshd[27401]: Accepted none for adm from 5.188.86.168 port 43027 ssh2 ... Jul 21 13:23:24 UNRAID sshd[27529]: Accepted none for adm from 5.188.62.14 port 38206 ssh2 ... Jul 21 13:23:41 UNRAID sshd[28073]: Accepted none for adm from 45.227.255.207 port 58710 ssh2 https://www.abuseipdb.com/check/54.37.44.95 https://www.abuseipdb.com/check/5.188.86.212 https://www.abuseipdb.com/check/222.186.175.183 https://www.abuseipdb.com/check/5.188.86.168 https://www.abuseipdb.com/check/5.188.62.14 https://www.abuseipdb.com/check/45.227.255.207 As you can see from those links, you are being attacked from all over the world. @ZiemaF Fix this NOW!!! Quote
ZiemaF Posted July 28, 2020 Author Posted July 28, 2020 On 7/24/2020 at 10:25 AM, Kevek79 said: You should use a vpn connection. Wireguard on Unraid I will apply this solution, thank you for the information. The disk that was cleaned with Preclear I added it back to the Array and it rebuilt. HDD has been working for several days without a problem. Quote
Kevek79 Posted July 29, 2020 Posted July 29, 2020 Happy to hear that the rebuild worked and you did not loose any data. @ZiemaF: Did you tackle the "facing the internet" issue? You really should! Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.