NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
markbad311
Dec 22, 2023Aspirant
ReadyNAS RN524X - Default Raid Version - Recovery
We have a ReadyNAS RN524X
We had our ReadyNAS attacked by hackers. They claimed to have stolen our data. They said they would restore it but they did not. I believe they may have simply deleted our volumes once the ordeal was over but I am not sure yet.
I will explain the situation we are in right now. With the disks in, we cannot get in to the ReadyNAS. I can only get in while in safe mode. When I slide the disks in after I am in safe mode it recognizes them, but wants me to create a new volume on the new volume page.
If I try to boot the device with the disks in and allow it to boot normally we can not get in with the admin password. I have reinstalled the ReadyNAS OS using the bootable drive / tool method and I installed the latest OS version.
Still... not able to get in with default user id and password. I am wondering what my options are WHILE connected to the ReadyNAS and I am wondering if I have to try to do a data recovery. I believe I will need to know what the RAID formatting would have been for this 4bay ReadyNAS. No idea how to tell yet.
Any help?
21 Replies
Replies have been turned off for this discussion
- StephenBGuru - Experienced User
markbad311 wrote:
Still... not able to get in with default user id and password. I am wondering what my options are WHILE connected to the ReadyNAS and I am wondering if I have to try to do a data recovery. I believe I will need to know what the RAID formatting would have been for this 4bay ReadyNAS. No idea how to tell yet.
Just a reminder - default username is admin, and the default password is password.
Try booting the NAS in tech support mode. Instructions are on pages 128-129 here:
Then see if you can log into the NAS using telnet. If you are using a windows PC, I suggest you use the Putty client for that.
When you connect to the NAS, log in as root. The password when in tech support mode is infr8ntdebug.
If that works, then a reasonable place to start is to run lsblk. That will give you information on what partitions are on the disks. It's a bit tricky to proceed from there. Normally you'd run rnutil chroot so you could use the full set of linux commands on the NAS disks. But that might not be safe if the NAS OS is still compromised.
Another path is to connect the disks to a PC running linux, and then attempt to mount the array. It'd be wise to disconnect the PC from your network before booting it up.
A variation is to purchase RAID recovery software that supports BTRFS (for instance ReclaiMe). Connect the NAS disks to a windows PC - either with SATA or using USB dock(s) and see if ReclaiMe finds anything it can recover. Note you can download ReclaiMe for free, you don't need to pay for it unless you actually want to recover something. Again, it would be prudent to disconnect the PC from the network before connecting the disks.
- markbad311Aspirant
When I boot the NAS up in tech support mode it does boot. I see the IP on the front, that is good.
I try to putty to the same address on port 22 and I get a connection refused error. Is that the right port?
Thank you.
- StephenBGuru - Experienced User
markbad311 wrote:
I try to putty to the same address on port 22 and I get a connection refused error. Is that the right port?
No. You have the protocol set to ssh.
Select "other", and then choose telnet from the pulldown.
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!