Warning: Trying to access array offset on null in phar://.../vb/vb.phar/bbcode/url.php on line 2 Notice: str_replace(): Passing null to parameter #3 ($subject) of type array|string is deprecated in phar://.../vb/vb.phar/string.php on line 3 Summary of the 1bet 18bet Babibet "hacking scandal" - Sportsbook Review Forum

Summary of the 1bet 18bet Babibet "hacking scandal"

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • lonnie55
    SBR MVP
    • 04-08-16
    • 2689

    #36
    Of course both IPs belong to the same service provider, both IPs belong to the user
    Comment
    • Optional
      Administrator
      • 06-10-10
      • 60674

      #37
      Originally posted by lonnie55
      Of course both IPs belong to the same service provider, both IPs belong to the user
      A bit confused by what you mean?

      If both the Router IP and the Betting IP were used by the user then it is suggestive of them placing that losing bet themselves.


      Looking at the IPs has given me another idea of what may be happening though
      .
      Comment
      • lonnie55
        SBR MVP
        • 04-08-16
        • 2689

        #38
        Originally posted by Optional
        A bit confused by what you mean?
        Comment
        • Optional
          Administrator
          • 06-10-10
          • 60674

          #39
          Does that German language say something I should be understanding?

          Or are you asking if I checked that IP too?

          All of them mentioned are issued by Ripe to Deutsche Telekom and appear to be part of a dynamic pool.

          ie: they are all probably used by retail ISP customers of theirs.



          .
          Comment
          • lonnie55
            SBR MVP
            • 04-08-16
            • 2689

            #40
            62.225.220.187 vs 62.225.200.230

            It's not 100% identical but this happens when different devices share the same network, right?

            So the IP log of 1bet/Babibet actually seem to match the IP log of the user
            Comment
            • lonnie55
              SBR MVP
              • 04-08-16
              • 2689

              #41
              Anyway, you're right. You can't make an argument from the IP data.
              Comment
              • Alfie White
                SBR Wise Guy
                • 09-02-17
                • 680

                #42
                Originally posted by lonnie55
                62.225.220.187 vs 62.225.200.230

                It's not 100% identical but this happens when different devices share the same network, right?
                Not exactly, whichever device you connect with to your (WiFi) router, IP should always stay the same - as the website will "see" router's IP address.

                The thing you are explaining are "local" IP addresses, where you have "master" IP (192.168.1/0.X) and all other devices you connect to it will receive the same IP but with the different last part.

                That is what I know about networking at least.
                Comment
                • Optional
                  Administrator
                  • 06-10-10
                  • 60674

                  #43
                  Originally posted by lonnie55
                  62.225.220.187 vs 62.225.200.230

                  It's not 100% identical but this happens when different devices share the same network, right?

                  So the IP log of 1bet/Babibet actually seem to match the IP log of the user
                  No not really.

                  To get control of an IP you need to apply to a Regional Internet Registry, who allocates the IP numbers.

                  Most of the time big ISPs like this will lease usage of entire ranges XXX.XXX.XXX.XXX

                  They will always have to take at least XXX.XXX.XXX. so those last numbers mean very little in this context. They don't signify anything really.


                  I could not tell much at all by just looking at those numbers btw. I had to do a whois search on each range to determine they all seem to be in the same pool.

                  When online the victim here will only show as using one IP address for all devices going through that connection btw.
                  .
                  Comment
                  • lonnie55
                    SBR MVP
                    • 04-08-16
                    • 2689

                    #44
                    Originally posted by Alfie White
                    Not exactly, whichever device you connect with to your (WiFi) router, IP should always stay the same - as the website will "see" router's IP address.

                    The thing you are explaining are "local" IP addresses, where you have "master" IP (192.168.1/0.X) and all other devices you connect to it will receive the same IP but with the different last part.

                    That is what I know about networking at least.
                    Oh okay, that makes sense. Thanks.

                    The thing is that tippeo wanted to make an argument from 217.231.43.141 vs 62.225.200.230 but in fact it was 62.225.220.187 vs 62.225.200.230. So this is weird. Why does the book use a different IP for the fake bets? Did they mistype when they added the bets?
                    Comment
                    • lonnie55
                      SBR MVP
                      • 04-08-16
                      • 2689

                      #45
                      Originally posted by Optional
                      When online the victim here will only show as using one IP address for all devices going through that connection btw.
                      Yeah, but the thing is tippeo mistakenly highlighted the wrong IP address in the screenshot. The correct IP address at the time the bets were made was the one I posted above.
                      Comment
                      • tippeo
                        SBR Rookie
                        • 02-28-19
                        • 19

                        #46
                        Originally posted by lonnie55
                        Yeah, but the thing is tippeo mistakenly highlighted the wrong IP address in the screenshot. The correct IP address at the time the bets were made was the one I posted above.
                        Hi lonnie55,

                        are you sure I have highlighted the wrong IP?

                        IP log router change 1 : 62.225.220.187 (19.08.19 01:27:12 GMT+2:00 --> 23:27:12 GMT)

                        IP log router change 2 : 217.231.43.141 (19.08.19 03:09:56 GMT+2:00 --> 01:09:56 GMT)

                        IP log 1bet : 62.225.200.230 (19.08.19 04:05:55 GMT+1:00 --> 03:05:55 GMT)

                        IP log babibet: 62.225.200.230 (19.08.19 05:08:XX GMT+2:00 --> 03:08:XX GMT)

                        So if i'm not mistaken, my ip at the time the last fake bet was placed was ​217.231.43.141.

                        I think that their procedure can be explained quite simple, they just put the IP 62.225.200.230 I used probably during the last login into my account to the fake bet slip.

                        I also think that the bookmaker's IP log is worthless anyway, if you can add loosing fake bets to my account afterwards, you can also add a suitable IP for it.
                        Last edited by tippeo; 08-22-19, 06:51 PM.
                        Comment
                        • lonnie55
                          SBR MVP
                          • 04-08-16
                          • 2689

                          #47
                          Sorry, I got confused with the UTC times. So obviously you were right.

                          Do you remember the last time you logged into 18bet that day and how the IP was during your last session before the fake bets happened?
                          Comment
                          • lonnie55
                            SBR MVP
                            • 04-08-16
                            • 2689

                            #48
                            Originally posted by tippeo
                            IP log 1bet : 62.225.200.230 (19.08.19 04:05:55 GMT+1:00 --> 03:05:55 GMT)
                            Wait a minute. Now I am confused even more

                            The kickoff of that match was 4:25 UTC+2 (=your time) and 2:25 UTC, right?

                            The screenshot of 1bet shows the bet placement happened at 4:05:55 UTC which is 6:05:55 your time

                            So we would need to know your IP at that time. Maybe it has changed back to 62.225.xxx.xxx
                            Comment
                            • Mediterranean
                              SBR Rookie
                              • 05-12-18
                              • 27

                              #49
                              Weird, was the bet placed after the kickoff ?
                              Comment
                              • lonnie55
                                SBR MVP
                                • 04-08-16
                                • 2689

                                #50
                                Originally posted by Mediterranean
                                Weird, was the bet placed after the kickoff ?
                                According to the screenshot it was placed in the 81' or 82' but obv. it was edited
                                Comment
                                • pythonic
                                  SBR Rookie
                                  • 03-05-19
                                  • 23

                                  #51
                                  Originally posted by lonnie55
                                  Wait a minute. Now I am confused even more

                                  The kickoff of that match was 4:25 UTC+2 (=your time) and 2:25 UTC, right?

                                  The screenshot of 1bet shows the bet placement happened at 4:05:55 UTC which is 6:05:55 your time

                                  So we would need to know your IP at that time. Maybe it has changed back to 62.225.xxx.xxx
                                  No, his IP stayed at 217... according to the router log.
                                  But he wasnt logged in at that time so 1bet would have to make up an IP for the fake bet.
                                  Comment
                                  • tippeo
                                    SBR Rookie
                                    • 02-28-19
                                    • 19

                                    #52
                                    Originally posted by lonnie55
                                    Sorry, I got confused with the UTC times. So obviously you were right.

                                    Do you remember the last time you logged into 18bet that day and how the IP was during your last session before the fake bets happened?
                                    Unfortunately I have no IP log of my router for the time of my last login the day before.

                                    But I suspect that they didn't change anything on my IP log and 62.225.200.230 is the real IP from my last login the day before.

                                    They just put the last known IP of me into the generated fake bet slips.

                                    I don't kown if they have needed to login to my account (and probably removed their IP afterwards from their list) or they just inserted the fake bets in their system without loggin in into my account (So no new IP was listed).

                                    Their argumentation is:

                                    The IP that was used for logging in, cancelling the withdrawal request and placing bets is 62.225.200.230.
                                    According to the logs, you have used same IP before as well (please refer to the enclosed files).


                                    They couldn't know that I had a completely different IP (because variable) at that time, because I wasn't logged in at that time.

                                    Alle the fake bets were in-play bets!
                                    Comment
                                    • BetGiant
                                      SBR Rookie
                                      • 08-23-19
                                      • 1

                                      #53
                                      I don't know if I'm the first one with the 1300€ (Posted it in a german forum about 18bet). It was the the 13th June at 18bet. I contacted MGA but they didn't reacted, It's a scandal!!!
                                      First I thought that I'm the only one but now it's sure that its a ploy of them.
                                      Comment
                                      • piterp
                                        SBR High Roller
                                        • 06-02-13
                                        • 241

                                        #54
                                        Their software just allow them to generate whatsoever they like-I heard similar story about forex market maker 2 years ago
                                        Comment
                                        • Optional
                                          Administrator
                                          • 06-10-10
                                          • 60674

                                          #55
                                          Originally posted by BetGiant
                                          I don't know if I'm the first one with the 1300€ (Posted it in a german forum about 18bet). It was the the 13th June at 18bet. I contacted MGA but they didn't reacted, It's a scandal!!!
                                          First I thought that I'm the only one but now it's sure that its a ploy of them.
                                          Welcome BetGiant

                                          Would you please send in a complaint form with your account number and the basic details?

                                          Date withdraw requested

                                          When it was cancelled

                                          When losing bets were placed, how many, how much each one.


                                          .
                                          Comment
                                          • infotimbo
                                            SBR Wise Guy
                                            • 10-24-18
                                            • 837

                                            #56
                                            Originally posted by Optional
                                            In each of these cases SBR is being given the same convincing looking evidence.
                                            Don't get caught up too much arguing about their IP data. The evidence they are coming up with is not technically disputable.
                                            Did they send you any logs showing that the same IP was used before though?

                                            I'm asking, because in Tippeo's case this would "prove" that all those bets (and the associated IP data) were made up, because as a customer of the German Telekom it's not even possible to keep the same IP for more than 24 hours. So if that 62.225.200.230 IP (the alleged "fake bets" were placed from) pops up in the logs from any other day, it would mean that there's something very fishy.
                                            Comment
                                            • Optional
                                              Administrator
                                              • 06-10-10
                                              • 60674

                                              #57
                                              If you want to get results you don't get caught up arguing about red herrings they put forward. So personally I would not even engage about their IP 'evidence'.

                                              I only did with Lonnie to illustrate it's a useless argument angle.

                                              The pattern of how it is occurring with a growing series of apparently non linked accounts is all we need to talk about.
                                              .
                                              Comment
                                              • infotimbo
                                                SBR Wise Guy
                                                • 10-24-18
                                                • 837

                                                #58
                                                okay. So we can expect action soon?!
                                                Comment
                                                • KittiP
                                                  SBR Sharp
                                                  • 03-20-19
                                                  • 286

                                                  #59
                                                  Im the guy that had the same problem with 18Bet (6x1,100 Euro Bets)

                                                  MGA and 18Bet ignored my request for proof and didn't send the requested IP information that I asked for.

                                                  I don't think it matters though because of course it can be easily faked.

                                                  I am surprised that they sent it to you.

                                                  I'm not sure if I read it correctly, but are you saying that your IP when the bets were placed was:

                                                  62.225.220.187 at 1bet
                                                  62.225.200.230 at
                                                  Babibet?

                                                  And from the other thread, you showed that the bets were pretty much placed at the same time on the same events?

                                                  As for as I know, if you have a router and two devices are connected to it, then your IP address on the two devices would be the same.

                                                  The other possibility is that you are connected for example to your router on one device and you are using another device on 4g or sim card data....but who would do that? And then why would the IP's be so similar?

                                                  This whole thing is just so stupid. It's so clear what is going on here.
                                                  Comment
                                                  • lonnie55
                                                    SBR MVP
                                                    • 04-08-16
                                                    • 2689

                                                    #60
                                                    Another recently launched book using the Delasport software:



                                                    So the list is:

                                                    1bet
                                                    18bet
                                                    Babibet
                                                    playpcf
                                                    robet247
                                                    sportempire
                                                    (and broker PremiumTradings)

                                                    This is actually scary. They are scamming and expanding at the same time
                                                    Comment
                                                    • Motorhead11
                                                      SBR High Roller
                                                      • 09-04-18
                                                      • 238

                                                      #61
                                                      Originally posted by lonnie55
                                                      Another recently launched book using the Delasport software:



                                                      So the list is:

                                                      1bet
                                                      18bet
                                                      Babibet
                                                      playpcf
                                                      robet247
                                                      sportempire
                                                      (and broker PremiumTradings)

                                                      This is actually scary. They are scamming and expanding at the same time
                                                      Other than software, playpcf seems is not connected with rest bookmakers. They are operated by Moundberg Limited (thepogg has blacklisted the company as they are related to Danguad Limited)
                                                      Comment
                                                      • lonnie55
                                                        SBR MVP
                                                        • 04-08-16
                                                        • 2689

                                                        #62
                                                        Originally posted by Motorhead11
                                                        they are related to Danguad Limited)
                                                        I liked EatSleepBet
                                                        Comment
                                                        • Optional
                                                          Administrator
                                                          • 06-10-10
                                                          • 60674

                                                          #63
                                                          Originally posted by KittiP
                                                          Im the guy that had the same problem with 18Bet (6x1,100 Euro Bets)

                                                          MGA and 18Bet ignored my request for proof and didn't send the requested IP information that I asked for.

                                                          I don't think it matters though because of course it can be easily faked.

                                                          I am surprised that they sent it to you.

                                                          I'm not sure if I read it correctly, but are you saying that your IP when the bets were placed was:

                                                          62.225.220.187 at 1bet
                                                          62.225.200.230 at
                                                          Babibet?

                                                          And from the other thread, you showed that the bets were pretty much placed at the same time on the same events?

                                                          As for as I know, if you have a router and two devices are connected to it, then your IP address on the two devices would be the same.

                                                          The other possibility is that you are connected for example to your router on one device and you are using another device on 4g or sim card data....but who would do that? And then why would the IP's be so similar?

                                                          This whole thing is just so stupid. It's so clear what is going on here.
                                                          Originally posted by lonnie55
                                                          Another recently launched book using the Delasport software:



                                                          So the list is:

                                                          1bet
                                                          18bet
                                                          Babibet
                                                          playpcf
                                                          robet247
                                                          sportempire
                                                          (and broker PremiumTradings)

                                                          This is actually scary. They are scamming and expanding at the same time

                                                          Thank you guys. Both of these are useful and helfpul info.
                                                          .
                                                          Comment
                                                          • lonnie55
                                                            SBR MVP
                                                            • 04-08-16
                                                            • 2689

                                                            #64
                                                            UPDATE:

                                                            A new case has been added:
                                                            https://www.sportsbookreview.com/forum/sportsbooks-industry/3553554-18bet-6600-euros-losing-bets-added-my-account-3207-withdrawal-cancelled-p5.html#post28912807

                                                            The user has posted the screenshots of the betting history here: https://www.sportsbookreview.com/for...l#post28918316

                                                            The remarkable thing about this case is that three of the added fake bets show a wrong transaction date as you can see on the following screenshots:








                                                            So the person in charge of the scam was actually too stupid to put in the correct date when adding the fake bets. It's highly unlikely (if not impossible) that an automated software randomly generates a wrong transaction date in a continuous series of data!



                                                            Updated Summary:

                                                            Known incidents before June 2019:

                                                            #1 at ?* - 1300 was one bet

                                                            Known incidents since June 2019:

                                                            #2 at ?* - 1900 was 700 x 2 and 500
                                                            #3 at 1bet - 1500 was 750 x 2
                                                            #4 at Babibet - 650 was one bet
                                                            #5 at 18bet - 6600 was 1100 x 6
                                                            #6 at 18bet - 9000 was 4500 x 2
                                                            #7 at 1bet - 10242 was 8 bets 690, 940, 725, 1250, 2475, 2500, 850, 812
                                                            #8 at Babibet - 3185 was 5 bets 735, 890 and 520 x 3
                                                            #9 at Babibet - 5667
                                                            more to come


                                                            This makes it 38,744 EUR in total so far.



                                                            Comment
                                                            • curry2211
                                                              SBR Rookie
                                                              • 03-16-19
                                                              • 25

                                                              #65
                                                              It's annoying to see that they can do that and nobody steps in. It's arrogant and audacious at the same time. I really do not understand why they even do all these stupid stunts, with fakebets or their "anti-fraud department" (actually very funny). Why not just take the money and close the accounts? Anyone a plausible theory for that?
                                                              Comment
                                                              • realloque
                                                                SBR Rookie
                                                                • 10-10-19
                                                                • 38

                                                                #66
                                                                I also have very bad memories about this total thief bookie . This year , i made accoutn in 18bet , to see if i can bet there . It was not izi , because they copy odds , prematch is copied from pinnacle , live is copied from bet365 or from pinnacle . And accepting odds its like 40 seconds . So it was no use . But they gave me 200 EUR bonus for French open , if i deposit 1000 EUR . So , i did it . Then i saw i need to make a turnoer , it was like 5000 eur to turn . Since no arbitreages and so on , i did random bets on my types for tennis big games ( most french open or all , i dotn remember ) and i was betting on MLB games money line , on higher odds ( hehe ) , because i needed to make a turnover . I got op lucky , and i gathered 5000 eur . Been waiting only for making turnover . When was done , i tried to withdrawal . Then circus has started . They blocked my withdawal . It been taking some days , finally these putos CHANGED HISTORY , funny thing is , this changed history still indicated like i should have won some good money ( like 2000 EUR ) , and on account i saw blistering 40 EUR . I talked to them . they didnt talk to me AT ALL . Total ignoring me . Finallly , after i noticed i dont win and im entraped , i decided to withdraw 40 EUR . Couldnt , hehe . Finally i just left , losing some decent money . Whats funny more , they still offerring me very high bonus ( hehe ) , like nothing have had happened before . Its just a circus . What can i say , i played only big matches , or French open , or MLB , no pulps , just prematch games to make turnover . This bookie in normal country should land in a jail for some decents years . Beware these trashes please .
                                                                Comment
                                                                • KittiP
                                                                  SBR Sharp
                                                                  • 03-20-19
                                                                  • 286

                                                                  #67
                                                                  Whats their plan now?

                                                                  To steal as much money from their players as possible, close down and then re-open under another name?
                                                                  Comment
                                                                  • xjan18
                                                                    SBR Rookie
                                                                    • 11-07-10
                                                                    • 1

                                                                    #68
                                                                    hey guys, i am having the same problem. Made like 10 deposits always losing deposit and bonus. Finally hit something, had to make rollover with 600 euro bets(as written in terms and conditions)-so i just made 20-30 flat 600 euro bets. Finished at around 9700 on my account. Finished verification and withdrawn 1500 eu. Left 8000 and sth on my account and after a 1st successful withdrawal decided to withdrawn all my funds-so made a withdraw for all 8k and since nothing happened for 2-3 days i have decided to log in my account. In transaction list it was my withdraw allegedly cancelled by me, and there were around 8-10 bets placed for different amounts. All of them were clearly lost. Tried to contacted them on chat but they kept saying i have cancelled withdrawal and placed all of those bets.

                                                                    I guess i am not the only one got scammed by them. What should i do? Probably you guys tried a lot thinks and i am wondering if anything worked?

                                                                    As their gaming license is in Malta and i am also from European Union i think the only option left is to sue them? But i guess it is going to be hard to prove that i have not placed those bets.
                                                                    However the only prove could be that those bets were not placed from the same ip as all other bets...but i guess they can also edit ip logs etc. ?

                                                                    any suggestion will be highly aprreciated...
                                                                    Comment
                                                                    • lonnie55
                                                                      SBR MVP
                                                                      • 04-08-16
                                                                      • 2689

                                                                      #69
                                                                      You guys should join forces and hire some outlaw motorcycle gang that enforces your claims. I think that's the only realistic way to reach anything in those crooked countries.
                                                                      Comment
                                                                      • lonnie55
                                                                        SBR MVP
                                                                        • 04-08-16
                                                                        • 2689

                                                                        #70
                                                                        another one (translated through google):

                                                                        "I can only warn you about 18bet!

                                                                        My account has been in existence for over two years, was fully verified and I have never had any problems with the payment.

                                                                        Just two weeks ago, a 4-digit amount was successfully paid out without any problems.

                                                                        After that I paid € 2727 again.

                                                                        I had a pending payment of € 11,448.

                                                                        The outstanding payment was canceled and lost with "fake bets".

                                                                        € 60 was left in my account. Very generous!

                                                                        I didn't do that! We know everything that happened!

                                                                        The particularly perfidious thing is that bets have been selected that fit my betting scheme exactly so that I can easily say that it is just a bad loser."
                                                                        Comment
                                                                        SBR Contests
                                                                        Collapse
                                                                        Top-Rated US Sportsbooks
                                                                        Collapse
                                                                        Working...