Suspicious notes and users

[avij]

Scheveningen - Markdorf androl-testaccount-1 - androl 608 10

Testaccount? So androl has a hit with his Testing account?

Well, I think it's obvious that it's indeed a test entry, nothing to worry about. It'll be cleaned up.

[wisi]

Testaccount? So androl has a hit with his Testing account?

If I recall it correctly, androl mentioned somewhere that he guesses somewhere an sec. hole and probably this account was for really testing and therefore improving eurobilltracker :)

[georgie1913]

Yesterday I still mentionned that Peugeot206_be and loui have frequently hits together. Today I found a new one. I don't think they are intersting

[-STAR-]

> i think the database of ebt is hacked by centless_user

This user is definitely weird, see
http://www.eurobilltracker.eu/index.php ... 8;id=59756
200 bills entered, 22 hits.

2005-06-21 13:50 Kassel - Espoo joergb30 - centless_dreamer 1367 67
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Nürnberg - Espoo Spanier_20 - centless_dreamer 1474 332
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Nürnberg - Espoo Spanier_20 - centless_dreamer 1474 332
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Nürnberg - Espoo Spanier_20 - centless_dreamer 1474 332
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Nürnberg - Espoo Spanier_20 - centless_dreamer 1474 332
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1473 307
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Kassel - Espoo joergb30 - centless_dreamer 1364 2
2005-06-21 13:48 Kassel - Espoo joergb30 - centless_dreamer 1364 649
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307
2005-06-21 13:48 Mülheim - Espoo Helge - centless_dreamer 1476 307

All of today, all in one batch. That's impossible.
Regards, Franz

[alex77r]

I noticed that from centless_dreamer (id=59756), 2 days ago :



2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:40:30 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)

2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:54 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:54 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)

2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)

2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:55 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:54 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:54 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)

2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)

2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURPxxxx7778xxx Fxxxxx Espoo ( Flag for Finland Finlande, 02150)
2005-06-19 20:39:14 5 EURXxxxx2655xxx Pxxxxx Espoo ( Flag for Finland Finlande, 02150)

Centless_dreamer and &nbsp are the same user :
http://www.eurobilltracker.eu/index.php ... =5137487;-

I would really like to know how this user can have so many hits

[Klazu]

Yes, it has been well-know for days that Centless_dreamer and &nbsp are the same jobless idiot. So there's no need to present any more of their (or other fake account he'll create) hits or notes. They will be very soon moderated out of sight and the accounts will be removed. I also hope that admins will try to be more faster if we want to overcome this asshole. A loser like him will lose eventualy. That's for sure. And when all his account are removed, every fake hits will return to normal.

I think it would be clever to raise the border of getting to use the advanced form temporarily from 50 to 200 bills. This how the idiot wouldn't be able to enter so many fake notes at time. Also removing his accounts as soon as possible would discourage him to continue. Entering 200 fake notes/hits with the single note form would be awful lot of work.

[Klazu]

Yes, this is SUPERB! And take a look at this! With a 500€ bill! Incredible.

But the shortcode is wrong. There are no €500/X/P bills.

So it's pretty sure a fake one. Please, remove it.

[androl]

I think it would be clever to raise the border of getting to use the advanced form temporarily from 50 to 200 bills. This how the idiot wouldn't be able to enter so many fake notes at time. Entering 200 fake notes/hits with the single note form would be awful lot of work.

I think you are wrong, he did use the simple form. Look at your own hits, there are only 3 or 4 per minute.

[avij]

Alright, looks like it's time to explain the situation to all of you.

As you've probably figured out by now,  , the other  , &bnsp;, agent and centless_dreamer are indeed the same person. The hits between  , the other  , &bnsp; and agent are mostly because agent's (probably mostly legitimate) notes were entered by the other three fabricated accounts. In addition to this, he used the usual trick of invented sequential numbers. At some point those hits and notes were removed. We hoped that he'd learn from his mistakes and not come back again, but unfortunately he continued entering those fake notes again. We sent him a couple of email messages, but he didn't bother replying to them at all. Up to this point he seemed like a typical abuser (albeit a more annoying one than the rest), we've dealt with dozens of these kinds of people in the past.

However, what really worried us for a moment was when centless_dreamer started getting hits with other innocent users. Some of them were a result of entering sequential numbers, but there were entries where it appeared that he knew the serial numbers and short codes in advance. We had a very close look at the logs and ran tcpdump to capture the traffic between EBT webserver and centless_dreamer's IP address, but found no trace of hacking activity -- just note entries that became instant hits.

We even emailed his school's abuse on Friday and asked them to identify the person for us. Unfortunately they haven't replied to us yet. We blocked his IP address (web proxy actually) for a while to calm down the situation. He then moved on to some internet cafe, and after we blocked it, he used a free shell access from another site. Today he used an another computer at TKK which wasn't yet blocked by our firewall. We'll probably contact TKK about this incident again, this time it appears that the user should be easier to figure out than in the previous case.

I and Nerzhul figured out the source of serial numbers on Sunday evening. As joergb30 pointed out in the German forum today, the source of those notes is indeed Euro Tracer, a competing €-tracking site. We could probably have published our findings right away, but I wanted to discuss the issue with Thomas first. We sent him a message stating that we're quite confident that his site has been used as a source and provided him some details about the abuse. He assisted us by having a look at his own database and web server logs, and that helped us to confirm our findings. It's still unclear to us how the exact serial numbers and short codes were retrieved from ET, but it is apparent that ET has been used as a source. I'll try to be clear about this: EBT was not hacked and centless_dreamer didn't use some secret security bug at EBT to figure out the correct short codes. The delays in processing this abuse case were mostly a result of having to wait for a reaction from third parties (abuse@tkk and Thomas).

Now that the big mystery has mostly been solved, the EBT abuse team will continue its work as usual -- deleting notes, blocking IP addresses as necessary etc. We'll continue doing this until the abuser gets tired or gets caught, whichever happens first. Nerzhul has been busy writing a tool which helps us to zap the suspicious notes and users with just a few mouseclicks, we'll probably start testing it on nbsp shortly.

If you're not happy with the way ET handles your data, I'd suggest discussing the issue somewhere else as it's not really a problem at EBT. Please be polite and avoid unnecessary flame wars. They've traditionally been more open regarding the serial numbers, please try to understand that their focus may be slightly different than ours.

[avij]

If I recall it correctly, androl mentioned somewhere that he guesses somewhere an sec. hole and probably this account was for really testing and therefore improving eurobilltracker

Yes, androl was chatting with me on #ebt when this was done. The bug he found was a) already found by me quite some time ago and b) is not really a security bug, just an interface bug. In some circumstances EBT does not ask for a confirmation if you want to enter a note with a different shortcode than what is already in the database for that note. It'll get fixed eventually, but it's not even closely related to the abuse that has been happening here in the last few days.

[Klazu]

@avij: Thank you so much! You (all the admins) once again proved yourself truly worth your positions! We're lucky to have such professional admins. I can really see that you concentrate on these events and work hard, although it isn't always (immediately) visible to us (normal users).

I at least got answers to questions that have been bothering me. I hope that the TKK will take your emails seriously, because the user bothering us is really abusing their systems. So they should take actions. I guess it's pretty easy for them to track from logs the user account that has been logged in when the abuse has been done. At least in University of Joensuu, all use of university computers needs logging into the system. So he's traceable.

But I still wonder a bit. You said that the serials were from Euro Trace site? I haven't ever used that site and yet the faker made several hits with me and some others. Was that just pure luck or what? I haven't published any of my serials anywhere...

I also wonder you holding user agent as mostly legitimate user. It was agent that made the hits with me. So he should also be removed eventually as a faker and abuser of the system!

[avij]

But I still wonder a bit. You said that the serials were from Euro Trace site? I haven't ever used that site and yet the faker made several hits with me and some others. Was that just pure luck or what? I haven't published any of my serials anywhere...

Your case was a bit different -- he found your notes by entering hundreds of consecutive serial numbers. And by coincidence, you had received a stack of brand new (really brand new ) notes from a bank. He managed to hit a few, and probably proceeded up and down from there so that he'd hit all of your notes from that stack of notes. No, your serial numbers haven't been published anywhere else as far as I know.

I also wonder you holding user agent as mostly legitimate user. It was agent that made the hits with me. So he should also be removed eventually as a faker and abuser of the system!

What I meant (and wrote) was that he had a few legitimate notes in his account and those were used to create fake hits with   and company. The hits that occurred with you are different, agent never had those notes. In any case, all the agent's notes will be removed once the dust settles a bit.

[joergb30]

el_motedura is flooding the database with a large amount of triple series again:
(all but from different countries)

2005-06-22 01:32:41 Mxxxx2691xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:29:18 Mxxxx2691xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:23:33 Mxxxx2691xxx Uxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:31:25 Mxxxx9142xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:27:45 Mxxxx9142xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:20:50 Mxxxx9142xxx Uxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:33:21 Vxxxx3166xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:30:46 Vxxxx3166xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:26:02 Vxxxx3166xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:30:04 Mxxxx9603xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:24:48 Mxxxx9603xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:18:25 Mxxxx9603xxx Uxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:28:36 Sxxxx9703xxx Jxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:21:42 Sxxxx9703xxx Jxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:16:19 Sxxxx9703xxx Jxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:25:30 Sxxxx8828xxx Jxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:19:12 Sxxxx8828xxx Jxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:12:47 Sxxxx8828xxx Jxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:20:19 Vxxxx9643xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:13:56 Vxxxx9643xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:05:21 Vxxxx9643xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:17:54 Vxxxx4453xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:11:02 Vxxxx4453xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:58:13 Vxxxx4453xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:22:54 Vxxxx2595xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:17:13 Vxxxx2595xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:09:41 Vxxxx2594xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:15:08 Mxxxx3546xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:07:16 Mxxxx3546xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:53:50 Mxxxx3546xxx Uxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:12:03 Vxxxx5874xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:06:11 Vxxxx5874xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:56:17 Vxxxx5874xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:09:07 Xxxxx4418xxx Pxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 01:00:40 Xxxxx4418xxx Pxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:54:21 Xxxxx4418xxx Pxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:04:46 Nxxxx9151xxx Fxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:56:54 Nxxxx9151xxx Fxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:48:59 Nxxxx9151xxx Fxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:03:56 Vxxxx8625xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:54:49 Vxxxx8625xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 00:57:45 Mxxxx4631xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:33:52 Mxxxx4631xxx Uxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 01:02:04 Vxxxx0057xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:55:37 Vxxxx0057xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:40:18 Vxxxx0057xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 00:51:04 Vxxxx9873xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:39:48 Vxxxx9873xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:32:06 Vxxxx9873xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 00:59:52 Vxxxx7836xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:50:31 Vxxxx7836xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:36:27 Vxxxx7836xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 00:38:51 Mxxxx5330xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:34:28 Mxxxx5330xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:29:16 Mxxxx5330xxx Uxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 00:45:38 Mxxxx6994xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:35:53 Mxxxx6994xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:30:17 Mxxxx6994xxx Uxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 00:35:12 Vxxxx1440xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:30:54 Vxxxx1440xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:27:44 Vxxxx1440xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 00:33:24 Mxxxx8803xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:29:47 Mxxxx8803xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:27:07 Mxxxx8803xxx Uxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 00:37:50 Vxxxx4464xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:32:41 Vxxxx4464xxx Mxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:28:11 Vxxxx4464xxx Mxxxxx Rinchoa ( Portugal, 2635-104)

2005-06-22 00:31:32 Mxxxx7636xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:28:45 Mxxxx7636xxx Uxxxxx Rinchoa ( Portugal, 2635-104)
2005-06-22 00:26:40 Mxxxx7636xxx Uxxxxx Rinchoa ( Portugal, 2635-104)

[Burdie]

What is going on with this bill? http://www.eurobilltracker.eu/index.php ... id=8423719


Is someone fooling around with EBT or is this also a test?

[soilian]

I think this one of the notes which serial is found in internet, or something like that.