Suspicious notes and users

Concerns? Let us know by posting here.

Moderators: Fons, avij, Phaseolus, dserrano5

User avatar
Vunono
Euro-Regular
Euro-Regular
Posts: 264
Joined: Thu Nov 05, 2015 2:08 pm
Location: Ceuta, España

Re: Suspicious notes and users

Post by Vunono »

Vunono wrote:
Thu Mar 04, 2021 11:26 pm
masalla10 and 2llsll, as "lucky" as usual :x

2021-03-04 20:11:24 50 EUR Comarruga - Riudecanyes Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210206053
2021-03-04 18:52:00 50 EUR Roda de Bara - Reus Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210204342
2021-03-03 22:57:56 50 EUR El Catllar (Tarragona) - Cambrils Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210188193
2021-03-03 21:17:40 10 EUR Comarruga - Cambrils Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210185172
2021-03-02 22:46:40 50 EUR Comarruga - Torredembarra Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210165688
2021-03-02 22:36:37 50 EUR El Vendrell - Torredembarra Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210165503
2021-03-01 23:08:29 50 EUR Torredembarra - Reus Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210147505
2021-03-01 22:27:33 50 EUR Torredembarra - Reus Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210146826
... and even luckier :evil:

2021-03-07 22:46:21 50 EUR Valls - Castellvell del Camp Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210276915
2021-03-07 18:46:57 50 EUR Valls - Reus Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210272470
2021-03-06 20:56:26 50 EUR El Vendrell - Creixell Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210254141
2021-03-06 20:32:22 50 EUR Torredembarra - El Vendrell Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210253540
2021-03-05 21:23:41 50 EUR Torredembarra - El Vendrell Flag for España Flag for España masalla10 - 2llsll https://es.eurobilltracker.com/notes/?id=210231836
User avatar
groucho
Euro-Expert
Euro-Expert
Posts: 574
Joined: Wed May 05, 2004 2:59 pm
Location: Zaragoza, Spain

Re: Suspicious notes and users

Post by groucho »

Masalla total hits 499. Hits with 2llsll 455
2llsll total hits 527. Hits with Masalla 455

Last 16 spanish hits, 14 Masalla ---- 2llsll
User avatar
Vunono
Euro-Regular
Euro-Regular
Posts: 264
Joined: Thu Nov 05, 2015 2:08 pm
Location: Ceuta, España

Re: Suspicious notes and users

Post by Vunono »

groucho wrote:
Mon Mar 08, 2021 6:47 pm
Masalla total hits 499. Hits with 2llsll 455
2llsll total hits 527. Hits with Masalla 455

Last 16 spanish hits, 14 Masalla ---- 2llsll
And they are number 1 and 2 in the ranking of Spanish users by number of hits :x
User avatar
lmviterbo
Euro-Master
Euro-Master
Posts: 5414
Joined: Thu Aug 21, 2003 5:23 pm
Location: Lisboa, Portugal
Contact:

Re: Suspicious notes and users

Post by lmviterbo »

GWR7007 wrote:
Thu Feb 18, 2021 7:41 pm
And ROMA_0100's tracking of :note-500: in rather "interesting" locations continues...
ROMA_0100 keeps tracking in non-locations, giving extra-work to Castanhola as city-manager in Portugal…

33 notes em "Peredes (4580-021)" — wrongly spelled location, which should be "Paredes".
22 notes in "Minho (4850-010)" — this is a region, not a location.

This, per se, wouldn't be suspicious, of course, but given that they have been talked about in his forum, I think I should mention it.
User avatar
philgelico
Euro-Master
Euro-Master
Posts: 11128
Joined: Sat Jul 21, 2007 9:22 pm
Location: Arras, France - Voiron, France - Lido di Dante, Italy

Re: Suspicious notes and users

Post by philgelico »

Strange day today, for german user : ROMA_0100 : https://en.eurobilltracker.com/profile/?user=192144
Today, he just made THREE hits.
It can be normal, but when you dig deeper :

https://en.eurobilltracker.com/notes/?id=210328805 with a :note-200: :lol: :roll: 8)
https://en.eurobilltracker.com/notes/?id=210329383 with a :note-50:
https://en.eurobilltracker.com/notes/?id=210329615 with a :note-10:

- the 3 hits have been made with same user : Madrid Flatmate : https://en.eurobilltracker.com/profile/?user=23003
-first hit is a Dublin :arrow: Taebla ( :flag-ee: Estonia ) at 18h09 CET
-second hit is a Dublin :arrow: Dublin at 18h20 CET
-third hit is a Dublin :arrow: Larnaca ( :flag-cy: Cyprus ) at 18h33 CET

Please investigate ...
Si tu veux voler avec les aigles, éloigne-toi des paons. (proverbe d'origine inconnue)
千里之行 始于足下, proverbe chinois
اتَّكَلْنا منه على خُصٍّ الاتحاد قوة, proverbe arabe
ספר המעשיות: כולל אגדות וסיפורים מתוך קובץ כ"י ישן, proverbe sanskrit
User avatar
Vunono
Euro-Regular
Euro-Regular
Posts: 264
Joined: Thu Nov 05, 2015 2:08 pm
Location: Ceuta, España

Re: Suspicious notes and users

Post by Vunono »

Vunono wrote:
Mon Mar 08, 2021 8:17 pm
groucho wrote:
Mon Mar 08, 2021 6:47 pm
Masalla total hits 499. Hits with 2llsll 455
2llsll total hits 527. Hits with Masalla 455

Last 16 spanish hits, 14 Masalla ---- 2llsll
And they are number 1 and 2 in the ranking of Spanish users by number of hits :x
18 of the 21 Spanish hits since March 1st are masalla10 - 2llsll... involving 13 different locations :x
User avatar
vermeer
Euro-Master
Euro-Master
Posts: 12873
Joined: Tue Jan 11, 2005 2:36 am
Location: Groningen, The Netherlands

Re: Suspicious notes and users

Post by vermeer »

Well if those 2 Spanish people are "happy" i do not care. With my Tjariet i had 7 hits in 2020, still none in 2021, number 50 was on 28/1/2019 and 100 was 15/12/2017. Before that the inbetweens were more shorter in days.
jeff44
Euro-Regular in Training
Euro-Regular in Training
Posts: 73
Joined: Sun Feb 10, 2019 9:49 am
Location: Nantes

Re: Suspicious notes and users

Post by jeff44 »

siriusLT
Euro-Expert in Training
Euro-Expert in Training
Posts: 338
Joined: Sat Dec 12, 2015 9:59 am

Re: Suspicious notes and users

Post by siriusLT »

philgelico wrote:
Wed Mar 10, 2021 7:07 pm
Strange day today, for german user : ROMA_0100 : https://en.eurobilltracker.com/profile/?user=192144
Today, he just made THREE hits.
It can be normal, but when you dig deeper :

https://en.eurobilltracker.com/notes/?id=210328805 with a :note-200: :lol: :roll: 8)
https://en.eurobilltracker.com/notes/?id=210329383 with a :note-50:
https://en.eurobilltracker.com/notes/?id=210329615 with a :note-10:

- the 3 hits have been made with same user : Madrid Flatmate : https://en.eurobilltracker.com/profile/?user=23003
-first hit is a Dublin :arrow: Taebla ( :flag-ee: Estonia ) at 18h09 CET
-second hit is a Dublin :arrow: Dublin at 18h20 CET
-third hit is a Dublin :arrow: Larnaca ( :flag-cy: Cyprus ) at 18h33 CET

Please investigate ...
And more banknotes (they are probably public notes) from the same user. Here's one for example - https://lt.eurobilltracker.com/notes/?id=210443424
RKPLt
Euro-Regular in Training
Euro-Regular in Training
Posts: 134
Joined: Fri May 17, 2013 6:22 pm

Re: Suspicious notes and users

Post by RKPLt »

Geros medžioklės! / Have a good hunt!
User avatar
klapotec
Euro-Master
Euro-Master
Posts: 2514
Joined: Tue Dec 27, 2005 12:18 pm
Location: Steiermark / Štajerska / Styria

Re: Suspicious notes and users

Post by klapotec »

RKPLt wrote:
Sat Mar 20, 2021 6:25 pm
What is this?https://lt.eurobilltracker.com/notes/?id=210527872
hmm looks like someone is trying to test whether EBT can be attacked easily
User avatar
simpsonspedia.net
Euro-Expert
Euro-Expert
Posts: 523
Joined: Wed Dec 26, 2007 12:29 am

Re: Suspicious notes and users

Post by simpsonspedia.net »

It's a warning.

"Achtung, diese Seite ist anfällig für Xss!"
simpsonspedia.de | nig

hits in
3.682 :flag-de:
0.006 :flag-at:
0.005 :flag-sk:
0.003 :flag-si:
0.003 :flag-eu: Lichtenstein
0.002 :flag-cz:

geworbene
111x :flag-de:     18x :flag-at:     3x :flag-ch:    1x :flag-fr:
User avatar
avij
Forum Moderator
Forum Moderator
Posts: 5957
Joined: Mon May 27, 2002 10:45 pm
Location: Helsinki Finland
Contact:

Re: Suspicious notes and users

Post by avij »

This has now been fixed, in the sense that this site is no longer vulnerable to XSS. I'll keep the odd entries visible for a while, so that people would know what this was all about.
Money makes the world go round. We track how the money goes round the world.
User avatar
Montgomery Burns
Euro-Master
Euro-Master
Posts: 2292
Joined: Tue Mar 08, 2011 2:49 pm
Location: Lis., PRT
Contact:

Re: Suspicious notes and users

Post by Montgomery Burns »

Most unusual bug report ever? :lol:
User avatar
simpsonspedia.net
Euro-Expert
Euro-Expert
Posts: 523
Joined: Wed Dec 26, 2007 12:29 am

Re: Suspicious notes and users

Post by simpsonspedia.net »

simpsonspedia.de | nig

hits in
3.682 :flag-de:
0.006 :flag-at:
0.005 :flag-sk:
0.003 :flag-si:
0.003 :flag-eu: Lichtenstein
0.002 :flag-cz:

geworbene
111x :flag-de:     18x :flag-at:     3x :flag-ch:    1x :flag-fr:
Post Reply

Return to “Feedback and Development”