0
Отвечен

После обновления , всем абонентам были разосланы смс о смене...

Владимир Дребезов 4 года назад обновлен 4 года назад 6

После обновления , всем абонентам были разосланы смс о смене тарифа , несколько раз , по итогу выжрало все деньги на смс шлюзе за несколько минут , это очередной подарок обновления ? или как всегда что то случилось лично у меня ? Проверьте ПЛЗ

На рассмотрении

посмотрите

/var/log/secure


похоже вы включили kernel use coa

а очередь не работала и там были события

а щас они отработали...

не нужно было просто так включать опцию.

Я ничего нигде не включал , и опция CoA у меня не включена , я просто обновил биллинг командой /usr/local/sbin/cron_mikbill.sh , и меня , и ешё тясячу человек , в 4 утра , завалило смс-ками пока деньги не закончились на пилоте.


а что касается /var/log/secure то там всё завалено такими логами


Apr 21 03:53:47 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.221 221 192.168.23.138 2 private 161 6 48:5B:39:6E:43:57

Apr 21 03:53:48 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 91.236.100.216 852 127.0.0.1 0 public 161 0 00:26:2D:8F:5B:08

Apr 21 03:53:48 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.58 1793 192.168.23.154 9 private 161 6 C0:4A:00:58:E3:7D

Apr 21 03:53:48 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.0.111 309 192.168.23.146 31 private 161 6 F4:6D:04:05:7A:12

Apr 21 03:53:48 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 91.236.100.216 852 127.0.0.1 0 public 161 0 00:26:2D:8F:5B:08

Apr 21 03:53:49 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.129 1291 192.168.23.137 10 private 161 6 20:CF:30:8D:9C:9F

Apr 21 03:53:49 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.129 1291 192.168.23.137 10 private 161 6 20:CF:30:8D:9C:9F

Apr 21 03:53:49 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/userkick.sh

Apr 21 03:53:49 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.82 1260 192.168.23.154 6 private 161 6 FC:8B:97:44:5E:A5

Apr 21 03:53:49 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.129 1291 192.168.23.137 10 private 161 6 20:CF:30:8D:9C:9F

Apr 21 03:53:49 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.129 1291 192.168.23.137 10 private 161 6 20:CF:30:8D:9C:9F

Apr 21 03:53:50 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.44 1086 192.168.23.152 6 private 161 8 EC:43:F6:D5:0D:29

Apr 21 03:53:50 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.44 1086 192.168.23.152 6 private 161 8 EC:43:F6:D5:0D:29

Apr 21 03:53:50 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.3.1 1883 192.168.23.152 16 private 161 8

Apr 21 03:53:50 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.3.1 1883 192.168.23.152 16 private 161 8

Apr 21 03:53:51 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.3.0 1882 192.168.23.145 2 private 161 6 10:FE:ED:90:89:7D

Apr 21 03:53:51 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.3.0 1882 192.168.23.145 2 private 161 6 10:FE:ED:90:89:7D

Apr 21 03:53:51 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/userkick.sh

Apr 21 03:53:52 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/userkick.sh

Apr 21 03:53:54 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.82 1260 192.168.23.154 6 private 161 6 FC:8B:97:44:5E:A5

Apr 21 03:53:55 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.3.2 1884 192.168.23.152 8 private 161 8 78:AC:C0:90:42:43

Apr 21 03:53:55 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.58 1793 192.168.23.154 9 private 161 6 C0:4A:00:58:E3:7D

Apr 21 03:53:56 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.0.16 43 192.168.23.137 18 private 161 6 F0:DE:F1:66:CC:1D

Apr 21 03:53:57 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.58 1793 192.168.23.154 9 private 161 6 C0:4A:00:58:E3:7D

Apr 21 03:53:57 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.82 1260 192.168.23.154 6 private 161 6 FC:8B:97:44:5E:A5

Apr 21 03:53:57 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.3.2 1884 192.168.23.152 8 private 161 8 78:AC:C0:90:42:43

Apr 21 03:53:58 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.44 1086 192.168.23.152 6 private 161 8 EC:43:F6:D5:0D:29

Apr 21 03:53:58 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/userkick.sh

Apr 21 03:53:58 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.0.32 69 192.168.23.144 14 private 161 6 60:EB:69:36:A8:A8

Apr 21 03:53:58 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.129 1291 192.168.23.137 10 private 161 6 20:CF:30:8D:9C:9F

Apr 21 03:53:58 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.129 1291 192.168.23.137 10 private 161 6 20:CF:30:8D:9C:9F

Apr 21 03:53:58 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.0.69 165 192.168.23.150 41 private 161 6 00:19:66:77:45:BE

Apr 21 03:53:59 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.0.69 165 192.168.23.150 41 private 161 6 00:19:66:77:45:BE

Apr 21 03:53:59 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/userkick.sh

Apr 21 03:53:59 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.168 1731 192.168.23.137 21 private 161 6 38:2C:4A:C0:E1:D4

Apr 21 03:53:59 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.168 1731 192.168.23.137 21 private 161 6 38:2C:4A:C0:E1:D4

Apr 21 03:54:00 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/userkick.sh

Apr 21 03:54:00 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=/bin/echo User-Name=4C:5E:0C:66:8D:26,Framed-IP-Address=91.236.101.99

Apr 21 03:54:00 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 91.236.101.99 1810 127.0.0.1 0 public 161 0 4C:5E:0C:66:8D:26

Apr 21 03:54:01 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.104 1217 192.168.78.24 1 private 161 8 BC:EE:7B:5A:6E:7F

Apr 21 03:54:01 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.104 1217 192.168.78.24 1 private 161 8 BC:EE:7B:5A:6E:7F

Apr 21 03:54:01 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.73 1799 192.168.23.146 4 private 161 6 E0:06:E6:4D:23:4E

Apr 21 03:54:01 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin/res/pcq ; USER=root ; COMMAND=/usr/bin/ssh bill@91.236.103.193 import pcq_mikrotik.rsc

Apr 21 03:54:02 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.0.32 69 192.168.23.144 14 private 161 6 60:EB:69:36:A8:A8

Apr 21 03:54:02 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.0.32 69 192.168.23.144 14 private 161 6 60:EB:69:36:A8:A8

Apr 21 03:54:03 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.0.32 69 192.168.23.144 14 private 161 6 60:EB:69:36:A8:A8

Apr 21 03:54:03 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.1.67 1120 192.168.78.26 18 private 161 8 00:19:66:83:7B:77

Apr 21 03:54:04 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/userkick.sh

Apr 21 03:54:04 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=/bin/echo User-Name=00:19:21:3D:F5:44,Framed-IP-Address=91.236.100.10

Apr 21 03:54:04 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 91.236.100.10 925 127.0.0.1 0 public 161 0 00:19:21:3D:F5:44

Apr 21 03:54:04 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.249 1875 1 private 161 18 00:30:18:A7:42:E9

Apr 21 03:54:04 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.112 1654 10 private 161 18 E0:3F:49:CF:98:16

Apr 21 03:54:04 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.2.112 1654 10 private 161 18 E0:3F:49:CF:98:16

Apr 21 03:54:04 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.0.77 190 192.168.23.154 12 private 161 6 78:54:2E:DC:F4:85

Apr 21 03:54:05 localhost sudo: root : TTY=unknown ; PWD=/var/www/mikbill/admin ; USER=root ; COMMAND=./sys/scripts/mikbill_tarif_change_event.sh 172.18.0.77 190 192.168.23.154 12 private 161 6 78:54:2E:DC:F4:85

Это больше не происходит ?

нет , оно сьело все деньги и успокоилось ) может если положить денег оно начнётся ещё . проверю.

вроде больше ничего не рассылает

Сервис поддержки клиентов работает на платформе UserEcho