Look up variable declaration types. I'm willing to bet someone did the math wrong. I've seen it a couple times before but I can't recall where.
While the IPs look random, they're not. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Mar 9, 2015 10:47 AM, "That One Guy" <[email protected]> wrote: > Where are these IPs coming from. > > and this is a direct serious question, at any point in time, whether as a > product of bertram or the previous developers, were billing servers used as > a distributed bitcoin mining system? > > On Mon, Mar 9, 2015 at 9:37 AM, Simon Westlake <[email protected]> > wrote: > >> It's not database corruption, but it is a known bug (IP changing when >> MAC is edited in customer portal) and it's fixed in 10.03.32. The patch >> will be out this week. >> >> On 03/08/2015 10:34 PM, Jeremy wrote: >> >> Yes, it seemed like a database corruption issue to me as well. I had one >> customer get the redirect and I went in and looked and he was on a >> completely wrong IP (in a subnet that I happened to be working on earlier >> that day and the evening before). He hadn't even logged into the customer >> portal. The logs didn't show any IP change, but clearly his IP was changed >> in the database, as he was working fine on the same IP for months and >> months. That issue and the incorrect assignments when a customer enters a >> new MAC seemed related to me. >> >> On Sun, Mar 8, 2015 at 9:26 PM, CBB - Jay Fuller < >> [email protected]> wrote: >> >>> >>> >>> >>> ----- Original Message ----- >>> *From:* Jay Fuller - Cyber Broadband Inc >>> *To:* Powercode >>> *Cc:* Cyber Broadband Inc. >>> *Sent:* Monday, February 02, 2015 7:34 PM >>> *Subject:* Re: Ticket Updated [Ticket Number:5841] - weird ip changes >>> during customer portal equipment edits >>> >>> >>> Gentlemen: >>> >>> It has happened again. >>> >>> xxxxxxxxxxxxx, customer 1478, requested a public routable IP address >>> which is >>> in a different address class from what he was assigned at installation. >>> Upon changing the address, he was assigned 104.152.40.91, which is an >>> available address in the "Cullman Public" address range. However, when >>> looking at the ARP response (because the customer is bridged to our main >>> router), I saw another network device already had that IP address. >>> >>> So, I searched for that MAC address, which was 78:24:AF:7B:49:38 , using >>> equipment search, which came back to customer >>> 514, xxxxxxxxxxxxxxxxxxxxx, who had logged into the customer portal on >>> January 29 to >>> install a new router. Upon changing his MAC address, powercode assigned >>> him >>> 104.153.191.25, which is not even in any of our network address ranges. >>> >>> It belongs to: >>> >>> Source: whois.arin.net >>> IP Address: 104.153.191.25 >>> Name: IMDC-KC-LOOPBACKS >>> Handle: NET-104-153-191-0-1 >>> Registration Date: 2/2/15 >>> Range: 104.153.191.0-104.153.191.31 >>> Org: Iron Mountain Data Center >>> Org Handle: IMIML >>> Address: One Federal Street >>> City: Boston >>> State/Province: MA >>> Postal Code: 02111 >>> Country: UNITED STATES >>> >>> >>> This is very similar to our new public IP range which is 104.152.40.0/22 >>> >>> Incidently, it appears this customer was assigned 104.152.40.91 before >>> he >>> attempted to edit his equipment and was changed to 104.153.191.25. Also >>> of >>> note, it appears this only affected the GUI/web interface of powercode, >>> and >>> the router/bmu continued to assign him 104.152.40.91. >>> >>> I will now have to reassign xxxxxxxxx a new IP address since the >>> web/gui >>> gave his IP address to someone else. >>> I hope this information helps you to figure out what is happening. >>> >>> I am still concerned we have some kind of database issue. Weird things >>> like >>> this seem to be happening a lot. >>> >>> Thanks. >>> >>> >>> >>> >>> >>> >>> ----- Original Message ----- >>> From: Powercode >>> To: Cyber Broadband >>> Sent: Thursday, January 22, 2015 2:15 PM >>> Subject: Ticket Updated [Ticket Number:5841] >>> >>> >>> ---------------- Please reply above this line ---------------- >>> Good afternoon Jay, >>> >>> We were able to test from this customer's account, and the same issue >>> that >>> was originally reported to us persisted. We logged into the customer >>> portal, >>> changed the MAC address by one digit, and immediately the customer was >>> issued an IP address of 192.170.241.173. After changing the MAC address >>> back >>> to his current valid one, we then had to manually clear out his IP >>> address >>> in Powercode in order for the BMU to hand out a reservation for >>> 192.168.3.36 >>> via DHCP. >>> >>> At this point, we are going to contact our network engineers for >>> assistance >>> in troubleshooting why this customer would receive a 192.170.xx.xx >>> reservation, as this IP does not fit within any ranges defined in >>> Powercode. >>> We will update you as soon as we've had a chance to go over this with >>> them. >>> >>> >>> >>> -------------------------------------------------- >>> >>> Have you visited our knowledge base? The Powercode knowledge base >>> contains >>> data on all aspects of Powercode, including the BMU. You may also find >>> useful information on our community forum. >>> We endeavor to respond to all tickets within two business days. Our >>> business >>> hours are Monday - Friday, 9AM to 5PM Central time. Please contact us >>> via >>> telephone at (920) 351-1010 or via Skype at powercode_support with any >>> urgent needs. >>> >>> >>> -- >>> John Mahnke >>> >>> Powercode - The smart choice in ISP billing and OSS >>> powercode.com >>> P: 920-351-1010 >>> E: [email protected] >>> >>> >>> ----- Original Message ----- >>> *From:* Jeremy <[email protected]> >>> *To:* [email protected] >>> *Sent:* Sunday, March 08, 2015 9:25 PM >>> *Subject:* Re: [AFMUG] Powercode oddity - Commerzbank Ip space >>> >>> I also have a ticket in about this issue. >>> >>> On Sun, Mar 8, 2015 at 2:10 PM, That One Guy <[email protected]> >>> wrote: >>> >>>> This is known to them? (powercode) >>>> >>>> On Sun, Mar 8, 2015 at 3:00 PM, CBB - Jay Fuller < >>>> [email protected]> wrote: >>>> >>>>> >>>>> yes, they're aware of it. i pointed this out to them weeks ago. :( >>>>> >>>>> >>>>> ----- Original Message ----- >>>>> *From:* That One Guy <[email protected]> >>>>> *To:* [email protected] >>>>> *Sent:* Sunday, March 08, 2015 2:06 PM >>>>> *Subject:* [AFMUG] Powercode oddity - Commerzbank Ip space >>>>> >>>>> I am able to replicate a small issue we are having, trying to make >>>>> the decision of whether it looks like a security issue or just a bug. >>>>> >>>>> Through powercode, there are two ways to update equipment, through >>>>> our interface, where we select all the details and through the customer >>>>> portal where all the customers can do is update their MAC address. >>>>> >>>>> no problems with our end. >>>>> >>>>> However, when a customer updates their MAC address, it is assigning >>>>> IP space that apparently belongs to this Commerzbank IP space >>>>> 208.74.54.100 >>>>> and 208.74.54.99. >>>>> >>>>> This IP space is absolutely not in our system, and wouldnt route >>>>> naturally on our network >>>>> >>>>> Net Range 208.74.52.0 - 208.74.55.255 CIDR 208.74.52.0/22 >>>>> Name DKIB-USA Handle NET-208-74-52-0-1 Parent NET208 ( >>>>> NET-208-0-0-0-0 <http://whois.arin.net/rest/net/NET-208-0-0-0-0.html>) >>>>> Net >>>>> Type Direct Assignment Origin AS >>>>> Organization Commerzbank AG (COMMER-109 >>>>> <http://whois.arin.net/rest/org/COMMER-109.html>) >>>>> >>>>> My initial thoughts are this is some bug in powercode. >>>>> >>>>> Paranoid me is that our system is somehow compromised and rerouting >>>>> illegitimate traffic somehow. Customer is down, so not through them. but >>>>> something like TOR rerouting or some other magician script for the axis of >>>>> evil. >>>>> >>>>> Anybody have any ideas on this? I am debating taking our billing >>>>> server offline, but would hate to take such an extreme measure for what >>>>> could amount to nothing more than a fat finger from a programmer. >>>>> >>>>> -- >>>>> If you only see yourself as part of the team but you don't see your >>>>> team as part of yourself you have already failed as part of the team. >>>>> >>>>> >>>> >>>> >>>> -- >>>> If you only see yourself as part of the team but you don't see your >>>> team as part of yourself you have already failed as part of the team. >>>> >>> >>> >> >> -- >> Simon Westlake >> Powercode - The smart choice in ISP billing and OSS >> powercode.com >> P: 920-351-1010 >> E: [email protected] >> > > > > -- > If you only see yourself as part of the team but you don't see your team > as part of yourself you have already failed as part of the team. >
