Charcoal HQ

12:44 AM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): hdwallet-provider set multiple account addresses by Игор Ташевски on ethereum.SE

[ SmokeDetector | MS ] Bad keyword with email in answer (85): Error: apt.conf:3: Extra junk at the end of file by chibest on askubuntu.com

@Das_Geek In general, the requirements for watching are vastly looser than for blacklisting. However, there should be a "why" as to something being put on the watchlist, as opposed to any random thing. If there isn't an obvious "why", then it's reasonable for anyone to ask. Sometimes, when watching, or blacklisting, we will either include a comment with the regex, or a comment message posted after the !!/watch, so other people know why. Usually not, but it depends on the circumstances.

In this case, there wasn't an obvious "why" just by glancing at the PR and seeing 1 FP on MS. Quickly glancing at the post didn't indicate that the post was TP. Thus, I asked "why?" The explanation you gave is fully adequate. Watching something like that is fine. We can remove it, if it generates considerable FP. Hopefully it will be good at detecting TP.

1:00 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): truffle migrates the contract with a weird account which is not from my mnemonic by AL ATh on ethereum.SE

1:14 AM

[ SmokeDetector | MS ] Body starts with title and ends in url (98): Ahmak Yalancı ekrem imamoğlu by Halil Taner on webmasters.SE

1:38 AM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How do you change the sizes of a gauge component in KendoReact? by Jiyuan Z on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): OpenSSL install error by FifthRevelathor on superuser.com

tpu- feedback received on Ahmak Yalancı ekrem imamoğlu [MS]

!!/watch- yalanci\.neocities\.org

[ SmokeDetector ] Blacklists reloaded at rev b6c7d9f (SmokeDetector: Auto watch of yalanci\.neocities\.org by Makyen) (running on teward/Anubis)

fp- feedback received on How do you change the sizes of a gauge component in KendoReact? [MS]

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Python: loading data from file csv insert whole data in .db and operate on tables by Kathelan on stackoverflow.com

[ SmokeDetector ] SmokeDetector started at rev b6c7d9f (SmokeDetector: Auto watch of yalanci\.neocities\.org by Makyen) (running on teward/Anubis, Python 3.7.4)

Restart: API quota is 15640.

[ SmokeDetector ] SmokeDetector started in standby mode at rev cb76df8 (SmokeDetector: Auto unwatch of (?-i:^Raj$) by Makyen) (running on Makyen/EC2-linux)

2:21 AM

[ SmokeDetector | MS ] Link at end of answer (60): not able to add google calendar in elementary calendar by dford on elementaryos.SE

[ SmokeDetector | MS ] Luncheon meat detected (40): What's this encryption of 13 digits starts with 5 by Display name on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): I encountered an error when using angular and ng-zorro-antd with ivy mode? by Heart Dream on stackoverflow.com

[ SmokeDetector | MS ] Link at end of answer (60): Sync Apple Calendar & Google Calendar into native Calendar application by dford on elementaryos.SE

fp feedback received on What's this encryption of 13 digits starts with 5 [MS]

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Python: loading data from file csv insert whole data in .db and operate on tables by Kathelan on stackoverflow.com

2:40 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How can we multiplex keyboard and mouse signals into the same USB port? by tavis on electronics.SE

2:50 AM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Is the hypnotization of Bull scene in Crocodile Dundee(1986) real? by digest on skeptics.SE

[ SmokeDetector | MS ] Offensive body detected, toxic body detected (104): I need help creating a menu in UNIX using a loop (Part 1) by Juan Isaacs on stackoverflow.com

Das_Geek

@Makyen Gotcha, thanks for the rundown. Didn't think to comment with the watch command directly; I'll try to do so in the future

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Tensor calculus is a powerful method in differential geometry by HASIBUL AHSAN on physics.SE

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad keyword in answer (2): Программа для отправки смс-сообщений на java by Volodya Lombrozo on ru.stackoverflow.com

3:15 AM

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): OpenSSL install error ✏️ by FifthRevelathor on superuser.com

3:28 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Internet Explorer 11 dark theme and dark mode for websites ✏️ by Nathan on superuser.com

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): How to get users data from wordpress woocomerce database to display by Alvic on wordpress.SE

[ SmokeDetector ] SmokeDetector started in standby mode at rev cb76df8 (SmokeDetector: Auto unwatch of (?-i:^Raj$) by Makyen) (running on iBug/SandyShores)

[ SmokeDetector | MS ] Bad keyword in body (96): Fitting multiple Gamma variate functions at once (with python) ✏️ by Antoine Collet on stats.SE

3:49 AM

Ooops... I forgot to actually approve this:

!!/approve 3485

[ SmokeDetector ] Blacklists reloaded at rev e6627a3 (SmokeDetector: Merge pull request #3485 from Charcoal-SE/auto-blacklist-1573686218) (running on teward/Anubis)

4:01 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Where can I find current downloadable tower, ground and approach frequencies for USA airports? by MtC on aviation.SE

4:17 AM

fp- feedback received on How to get users data from wordpress woocomerce database to display [MS]

fp- feedback received on Internet Explorer 11 dark theme and dark mode for websites [MS]

4:35 AM

fp- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Export adobe acrobat comments of a PDF, into TEXT file? ✏️ by Piotr Chylarecki on superuser.com

4:49 AM

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How can i change the color of text being input by the user by Chetanya Kunndra on stackoverflow.com

5:03 AM

[ SmokeDetector ] SmokeDetector started in standby mode at rev aff3da8 (SmokeDetector: Auto watch of (?-i:^Raj$) by Machavity) (running on Makyen/Windows)

5:15 AM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Why maphilight option 'alwayson' not working properly? by Afrina Hossain on stackoverflow.com

@SmokeDetector f

[ SmokeDetector | MS ] Blacklisted website in answer, username similar to website in answer (152): Answering a Whatsapp video call programmatically by uaewebsitedevelopment on stackoverflow.com

tpu- feedback received

@SmokeDetector k

5:35 AM

[ SmokeDetector | MS ] Bad keyword in answer, blacklisted website in answer, potentially bad keyword in answer (180): Teaching Introduction to Information Security as a mandatory course. Please your advice by Muhammad Ali on security.SE

tpu- feedback received

!!/watch (?-i:^Muhammad Ali$)

[ SmokeDetector ] Blacklists reloaded at rev d4c0d79 (SmokeDetector: Auto watch of (?-i:^Muhammad Ali$) by tripleee) (running on teward/Anubis)

@SmokeDetector this should have triggered blacklisted IP too

5:50 AM

[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +5 more (786): supplement4menia.com/instant-keto/ by gftyhjdf on puzzling.SE

[ SmokeDetector | MS ] Blacklisted user (71): What is the difference between check a model and tranlate a model in Dymola by Marvel on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, potentially bad ns for domain in body, +1 more (394): Best Fat Burning Exercises For Men by meliv on askubuntu.com

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, +4 more (591): Does Eminence Vitality Keto Weight Loss work? by Wadeiesth on graphicdesign.SE

tpu- feedback received

tp feedback received on Best Fat Burning Exercises For Men [MS]

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): How to run a DHCP server on an wifi port of a MacBook? by fabajiy992 on superuser.com

!!/blacklist-keyword-force eminence[\W_]*+vitality(?:[\W_]*+keto)?

@tripleee That pattern looks like it's already caught by Bad keyword in body and Bad keyword in answer; append -force if you really want to do that.

tpu- feedback received

[ SmokeDetector ] Blacklists reloaded at rev 17b0918 (SmokeDetector: Auto blacklist of eminence[\W_]*+vitality(?:[\W_]*+keto)? by tripleee) (running on teward/Anubis)

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, bad pattern in url body, link at end of body, pattern-matching product name in body, +5 more (684): What is Activate Keto and where to buy? by mariamask on askubuntu.com

fp feedback received on What is the difference between check a model and tranlate a model in Dymola [MS]

tp feedback received

tpu- feedback received on http://supplement4menia.com/instant-keto/ [MS]

!!/blacklist-website-force wintersupplement\.com

@tripleee That pattern looks like it's already caught by Pattern-matching website in answer and Pattern-matching website in body; append -force if you really want to do that.

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer, blacklisted user (73): Creating symbolic links by fabajiy992 on superuser.com

tpu- feedback received

!!/blacklist-website indeedmoney\.com

6:00 AM

[ SmokeDetector ] Blacklists reloaded at rev 9389168 (SmokeDetector: Auto blacklist of indeedmoney\.com by tripleee) (running on teward/Anubis)

[ SmokeDetector ] Blacklists reloaded at rev e4b45fe (SmokeDetector: Auto blacklist of wintersupplement\.com by tripleee) (running on teward/Anubis)

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Memory leak in Windows Media Foundation MFCreateSourceReaderFromURL function. Any alternative functions? ✏️ by c3267738 on stackoverflow.com

[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad ns for domain in answer, blacklisted user (165): Certain pictures render in weird green and purple palette in Linux Mint by fabajiy992 on superuser.com

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): Hello everyone..i am facing a problem in bypassng the login page using selenium with the above code which i got from the Guru99 by Harish Gowda on stackoverflow.com

[ SmokeDetector ] FindSpam module reloaded at rev 1ed0249 (tripleee: ! Watch IP 204.11.58.143) (running on teward/Anubis)

@SmokeDetector f

Q: How to flag spam user profiles in the absence of posts to flag?

tpu- feedback received on Certain pictures render in weird green and purple palette in Linux Mint [MS]

Processed Meat

6:22 AM

3

I came across this user profile, which contains links to the website of some sort of tv streaming service. A quick google revealed that the same text and links have been posted to dozens of websites that allow people to create user profiles or post messages that are exposed to search engines, usi...

Warning: Makyen/EC2-linux: 10 latest connections to metasmoke have failed. Disabling metasmoke

Warning: Makyen/Windows: 10 latest connections to metasmoke have failed. Disabling metasmoke

Warning: iBug/SandyShores: 10 latest connections to metasmoke have failed. Disabling metasmoke

Makyen/EC2-linux received failover signal.

Restart: API quota is 19916.

[ SmokeDetector | MS ] Bad ns for domain in body, bad ns for domain in title, bad keyword in body, bad keyword in title, link at end of body, +4 more (494): Try eating fruitsadd2cart.org/tierii-keto/ by user1112428 on superuser.com

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): How to run a DHCP server on an wifi port of a MacBook? by fabajiy992 on superuser.com

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): OpenSSL install error ✏️ by FifthRevelathor on superuser.com

@SmokeDetector f

@SmokeDetector k

tp feedback received

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, pattern-matching product name in title, +3 more (494): Evo Elite Keto – Exclusive Shark Tank Weight Loss Reviews, Buy by Indee1966 on meta.SE

tpu- feedback received

!!/location

@tripleee teward/Anubis

@tripleee Makyen/EC2-linux

6:36 AM

!!/standby makyen

Makyen/EC2-linux is switching to standby

[ SmokeDetector ] SmokeDetector started in standby mode at rev cb76df8 (SmokeDetector: Auto unwatch of (?-i:^Raj$) by Makyen) (running on Makyen/EC2-linux)

[ SmokeDetector | MS ] Url in title, bad ip for hostname in body, bad ip for hostname in title, bad keyword in body, bad keyword in title, +8 more (987): totaldiet4you.com/keto-top/ by user145563 on graphicdesign.SE

[ SmokeDetector | MS ] Bad keyword in link text in body, potentially bad keyword in body (69): What is AEPS and How its works? by digipe on stackoverflow.com

tpu- feedback received

tpu- feedback received on http://totaldiet4you.com/keto-top/ [MS]

!!/watch- digipe\.co

rebooting MS

6:51 AM

[ SmokeDetector ] Blacklists reloaded at rev 62598e5 (SmokeDetector: Auto watch of digipe\.co by Makyen) (running on teward/Anubis)

!!/blacklist-website-force- add2cart\.org

@Makyen That pattern looks like it's already caught by Bad ns for domain in body and Bad ns for domain in answer; append -force if you really want to do that.

[ SmokeDetector ] Blacklists reloaded at rev 9c57491 (SmokeDetector: Auto blacklist of add2cart\.org by Makyen) (running on teward/Anubis)

[ SmokeDetector | MS ] Url in title (96): When I Use "testnet.blockchain.info/unspent?active=" to get my UTXO on testnet by flyme on bitcoin.SE

@SmokeDetector f

[ SmokeDetector | MS ] Bad keyword in answer, username similar to website in answer (145): How to weight loss easily? by Common Celebrity on codegolf.SE

[ SmokeDetector | MS ] Pattern-matching website in answer, username similar to website in answer (138): WordPress Ajax JSON success return no being recognized by aryal on wordpress.SE

tpu- feedback received

tpu- feedback received on How to weight loss easily? [MS]

!!/watch commoncelebrity\.com

7:04 AM

[ SmokeDetector ] Blacklists reloaded at rev 8a0d338 (SmokeDetector: Auto watch of commoncelebrity\.com by tripleee) (running on teward/Anubis)

!!/watch- lalahuooo777

!!/watch- e-1573468750

!!/watch- (?-i:h8oEH\.jpg)

!!/watch- aryal\.ir

!!/watch- coaching[\W_]*+aryal

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to assign IAM role to users or groups ✏️ by Prajwal on stackoverflow.com

[ SmokeDetector ] Blacklists reloaded at rev 61b01fe (SmokeDetector: Auto watch of lalahuooo777 by Makyen) (running on teward/Anubis)

[ SmokeDetector ] Blacklists reloaded at rev f5c07b4 (SmokeDetector: Auto watch of e-1573468750 by Makyen) (running on teward/Anubis)

[ SmokeDetector ] Blacklists reloaded at rev 1c8877e (SmokeDetector: Auto watch of (?-i:h8oEH\.jpg) by Makyen) (running on teward/Anubis)

[ SmokeDetector ] Blacklists reloaded at rev e54523b (SmokeDetector: Auto watch of aryal\.ir by Makyen) (running on teward/Anubis)

[ SmokeDetector ] Blacklists reloaded at rev 2c0c552 (SmokeDetector: Auto watch of coaching[\W_]*+aryal by Makyen) (running on teward/Anubis)

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, pattern-matching website in body, +1 more (489): KSX Male Enhancement by caaroyki on graphicdesign.SE

tpu- feedback received

[ SmokeDetector | MS ] Phone number detected in title, potentially bad keyword in body, potentially bad keyword in title (70): Know about How to Change Comcast Email Password- Dial +1 (866) 748-5444 by Tanjaddaniel on superuser.com

tpu- feedback received

!!/watch-number +1 (866) 748-5444

@Shree That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body; append -force if you really want to do that.

[ SmokeDetector | MS ] Pattern-matching website in answer, potentially bad ns for domain in answer, potentially bad keyword in answer (81): When importing a spreadsheet into Access, how do you prevent Excel from auto assigning a data field type? by Edward paul on superuser.com

[ SmokeDetector | MS ] Repeating characters in title (64): ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Mat Paginator didn't show ✏️ by Hongli Bu on stackoverflow.com

tpu- feedback received on When importing a spreadsheet into Access, how do you prevent Excel from auto assigning a data field type? [MS]

[ SmokeDetector | MS ] Pattern-matching website in body, potentially bad ns for domain in body (98): Blood Sugar and Urine Sugar Difference by James Spears on drupal.SE

fp- feedback received on ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Mat Paginator didn't show [MS]

tpu- feedback received

7:23 AM

!!/watch-force- foodandnutritiontips\.com

@Makyen That pattern looks like it's already caught by Pattern-matching website in answer and Pattern-matching website in body; append -force if you really want to do that.

[ SmokeDetector ] Blacklists reloaded at rev f8fff93 (SmokeDetector: Auto watch of foodandnutritiontips\.com by Makyen) (running on teward/Anubis)

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title (194): Kunjungi Situs Terpopuler Agen Poker Ini Dan Raih Kemenangan Yang Fair |Latest Update| by lil clar on gamedev.SE

tpu- feedback received

!!/watch poker88asia02\.com

[ SmokeDetector | MS ] Bad keyword in body, blacklisted website in body, potentially bad keyword in body (196): Epson Printer Error by rogersmith12 on softwareengineering.SE

[ SmokeDetector ] Blacklists reloaded at rev 7137f61 (SmokeDetector: Auto watch of poker88asia02\.com by Shree) (running on teward/Anubis)

tpu- feedback received

!!/watch nagapoker02\.com

[ SmokeDetector ] Blacklists reloaded at rev 4d5da46 (SmokeDetector: Auto watch of nagapoker02\.com by Shree) (running on teward/Anubis)

[ SmokeDetector | MS ] Potentially bad keyword in username (1): How do I actually disable Wi-Fi or Bluetooth in iOS 11 Control Center? by Digital Marketing on apple.SE

tpu- feedback received

7:34 AM

Plagiarized from quora.com/… with spam link — tripleee 12 secs ago

!!/watch freeforyou\.in

[ SmokeDetector ] Blacklists reloaded at rev eb5db59 (SmokeDetector: Auto watch of freeforyou\.in by tripleee) (running on teward/Anubis)

!!/watch nagapoker01\.com

[ SmokeDetector ] Blacklists reloaded at rev c2df1fd (SmokeDetector: Auto watch of nagapoker01\.com by tripleee) (running on teward/Anubis)

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, bad keyword in username, bad pattern in url body, link at end of body, +5 more (777): Ketovatru Weight Loss Formula Reviews : It’s Not A Scam? by ketovatru56 on askubuntu.com

!!/watch poker88asia06\.com

tp feedback received

[ SmokeDetector ] Blacklists reloaded at rev 98854b0 (SmokeDetector: Auto watch of poker88asia06\.com by tripleee) (running on teward/Anubis)

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Arlo security system hack by Maybe Nation on crypto.SE

[ SmokeDetector ] Blacklists reloaded at rev 98854b0 (SmokeDetector: Auto watch of poker88asia06\.com by tripleee) (running on teward/Anubis)

7:40 AM

@SmokeDetector f but VLQ

[ SmokeDetector ] FindSpam module reloaded at rev e21596f (tripleee: ! Watch IP 198.187.29.22) (running on teward/Anubis)

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): SEO friendly javascript framework by Cypress India on stackoverflow.com

[ SmokeDetector | MS ] Url in title, potentially bad keyword in body (97): testnet.blockchain.info/q/getblockcount can not work by flyme on bitcoin.SE

@SmokeDetector k

!!/watch cypress24\.com

[ SmokeDetector ] Blacklists reloaded at rev 7d04d27 (SmokeDetector: Auto watch of cypress24\.com by tripleee) (running on teward/Anubis)

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, pattern-matching product name in title, +3 more (590): Alpha Testo Boost X :Specially made in the USA for male by poolanna on superuser.com

tpu- feedback received

[ SmokeDetector ] FindSpam module reloaded at rev 8a565d1 (tripleee: ! Watch IP 172.96.191.212) (running on teward/Anubis)

[ SmokeDetector ] FindSpam module reloaded at rev 1f7a610 (tripleee: ! Blacklist IP 69.167.167.150) (running on teward/Anubis)

[ SmokeDetector ] SmokeDetector started at rev 1f7a610 (tripleee: ! Blacklist IP 69.167.167.150) (running on teward/Anubis, Python 3.7.4)

Restart: API quota is 13144.

[ SmokeDetector | MS ] Repeating characters in answer (81): I am not sure I mostly use my samsung j3 phone or Asus laptop by Z00mer on superuser.com

[ SmokeDetector | MS ] Url in title, bad ns for domain in body, bad ns for domain in title, bad keyword in body, bad keyword in title, +9 more (888): This is the reason we did our own burrowingwww.factforfitness.com/instant-keto/ by salopein on graphicdesign.SE

[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to find nearby Doctors API? by Saqib Khan on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): hdwallet-provider set multiple account addresses when deploy contract by Игор Ташевски on ethereum.SE

tpu- feedback received on I am not sure I mostly use my samsung j3 phone or Asus laptop [MS]

tpu- feedback received on This is the reason we did our own burrowinghttps://www.factforfitness.com/instant-keto/ [MS]

8:05 AM

@SmokeDetector f

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): What differences between deep freezers and refrigerators? by Truman on superuser.com

Martin Sleziak

Using the tag (freeze). Quite inventive.

[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): NYC Handyman is a professional team by nychandymans on meta.SE

tpu- feedback received

tpu- feedback received on What differences between deep freezers and refrigerators? [MS]

[ SmokeDetector | MS ] Pattern-matching website in answer (79): Cannot find "my profile" in "contacts" to disable profile sharing by M Nasir Aziz on android.SE

tpu- feedback received

8:20 AM

!!/watch-force bestcellphonetrackerapps\.com

@Shree That pattern looks like it's already caught by Pattern-matching website in answer and Pattern-matching website in body; append -force if you really want to do that.

[ SmokeDetector ] Blacklists reloaded at rev 58b0279 (SmokeDetector: Auto watch of bestcellphonetrackerapps\.com by Shree) (running on teward/Anubis)

[ SmokeDetector | MS ] Manually reported question (93): Letters In Word Puzzle Questions by franchisjaberjesion on meta.SE

@MartinSleziak spammers routinely use random tags, some do research not to find out what the tags mean, but to find the most popular ones to get more exposure ... but often they just pick a random one because the UI requires them to

tpu- feedback received

!!/watch careerspages\.com

[ SmokeDetector ] Blacklists reloaded at rev 7502ab7 (SmokeDetector: Auto watch of careerspages\.com by tripleee) (running on teward/Anubis)

8:27 AM

!!/watch truman\.in

[ SmokeDetector ] Blacklists reloaded at rev f529d4f (SmokeDetector: Auto watch of truman\.in by tripleee) (running on teward/Anubis)

!!/watch nychandymans\.com

[ SmokeDetector ] Blacklists reloaded at rev e81be3b (SmokeDetector: Auto watch of nychandymans\.com by tripleee) (running on teward/Anubis)

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What are parenthesis used for in notation? by hetrs on music.SE

[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +4 more (493): www.autobodycu.org/pro-living-keto/ by Firly1983 on meta.SE

Martin Sleziak

@tripleee Well, in this case the name of the tag is at least somewhat related to the actual content of the spam posts. So it's not that random in this case. I remember quite a few posts using traveling-salesman-problem tag - where the content had something to do with travelling or holidays.

tpu- feedback received

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, link following arrow in body, +2 more (493): Tips To Emylia Cream Australia Much Better While Doing Other Things by AltonIplant on graphicdesign.SE

tpu- feedback received

[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +6 more (690): click2nextorder.com/tier-2-keto/ by ormierck on graphicdesign.SE

[ SmokeDetector | MS ] Blacklisted website in body, pattern-matching website in body, potentially bad ip for hostname in body, potentially problematic ns configuration in body (198): Acquire the Designing Modules Which Reflects Your Real Business Identity by Website Designing on superuser.com

tpu- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): shade area between lines; ggplot ✏️ by Matze on stackoverflow.com

naa- feedback received

[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially problematic ns configuration in body (2): Python/XML: proper way to retrieve node values? ✏️ by Seb on stackoverflow.com

[ SmokeDetector | MS ] Mostly punctuation marks in answer, repeating characters in answer (119): Undefined 'model' property of Keystonejs List object by Davit on stackoverflow.com

naa- feedback received

tpu- feedback received on What are parenthesis used for in notation? [MS]

8:41 AM

@MartinSleziak yeah, I concur, and there are probably some heuristics we could try to find spam based on tags

like you wrote, something with only one tag which is very specific might be suspicious

somebody actually asking about Traveling Salesman would probably also use something like np-complete or computability-theory or etc

!!/blacklist-website autobodycu\.org

@tripleee That pattern looks like it's already caught by Blacklisted website in body and Blacklisted website in answer; append -force if you really want to do that.

Martin Sleziak

Actually we talked about tags and SD some time ago: chat.stackexchange.com/transcript/message/44766265#44766265 chat.stackexchange.com/transcript/message/44766353#44766353

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How do I change until the next underscore in VIm? by Jdoherty on superuser.com

fp- feedback received

[ SmokeDetector ] FindSpam module reloaded at rev 2ec0805 (tripleee: ! Blacklist IP 132.148.29.42) (running on teward/Anubis)

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, pattern-matching website in body, +1 more (490): Instaketo has a 98% fulfillment rate! by Gyeter Nori on askubuntu.com

tp feedback received on http://click2nextorder.com/tier-2-keto/ [MS]

tpu- feedback received

CI on 8114885 succeeded.

[ SmokeDetector | MS ] Username similar to website in answer (59): ImageView rounded corners ✏️ by newreza on stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in answer, repeating characters in answer (168): Android TTS fails to speak large amount of text by Gauraw kumar on stackoverflow.com

tpu- feedback received

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching product name in body, +5 more (692): How Does Keto Pro Plus Work? by identifyscam on meta.SE

tp feedback received

9:10 AM

@SmokeDetector f

[ SmokeDetector | MS ] Link at end of answer (60): After upgrading to Ubuntu 19.10, MySQL fails ✏️ by crydotsnake on askubuntu.com

@SmokeDetector f

[ SmokeDetector | MS ] Blacklisted website in answer (93): Magento live feed eBay & Amazon by alex on stackoverflow.com

tpu- feedback received

naa- feedback received

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How to write a bare-metal hello world program for PowerPC by Pratik Parvati on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in username (1): How to use Continuous Variables for IF-THEN constraints on DOCPLEX (Python)? by Muhammad Ali on stackoverflow.com

fp- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in body (1): is there any way to get accountId and locationId for Google My Business API to fetch all reviews.? by Vivek thakur on stackoverflow.com

fp- feedback received

iBug

Contrary to what you might imagine, compiling a regex is actually very fast & simple, and is almost always way faster than actually matching it against a slightly longer string.

All "compiling" does is to tokenize written regex into a stream of "tokens" that can be used for actual matching, so this is done by scanning the whole string once and processing metacharacters, particularly grouping.

9:28 AM

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Scaffolding for .net core 3 and Devart.Data.Oracle.EFCore ends with error by Petr Schmidke on stackoverflow.com

another GoDaddy complaint: metasmoke.erwaysoftware.com/abuse/reports/161

fp feedback received

[ SmokeDetector ] SmokeDetector started in standby mode at rev 8114885 (tripleee: Whitespace alignment fix in blacklisted IP list) (running on iBug/SandyShores)

fp feedback received on How to write a bare-metal hello world program for PowerPC [MS]

Michael Dodd

!!/report stackoverflow.com/questions/58853363/…

[ SmokeDetector | MS ] Manually reported question (93): tạo một trang web chia sẻ phần mềm getlink từ google drive by Nam Quốc Thịnh on stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in body, repeating words in body (137): Array increment doesnt give the correct value ✏️ by Yassine on stackoverflow.com

tp feedback received on tạo một trang web chia sẻ phần mềm getlink từ google drive [MS]

tp feedback received

!!/watch botayit\.com

9:32 AM

@tripleee Added botayit\.com to watchlist

[ SmokeDetector ] FindSpam module reloaded at rev 209fd4e (SmokeDetector: Auto watch of botayit\.com by tripleee) (running on teward/Anubis)

[ SmokeDetector | MS ] Blacklisted user (71): Magento 1- How to get CatalogRuleId from order? by alex on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): My site is auto refreshing every 7 seconds. Plugin causing the issue by Andrew Davis on stackoverflow.com

9:49 AM

tpu- feedback received on Magento 1- How to get CatalogRuleId from order? [MS]

fp- feedback received

[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad keyword in answer (2): Программа для отправки смс-сообщений на java by Volodya Lombrozo on ru.stackoverflow.com

[ SmokeDetector | MS ] Few unique characters in body (94): count(): Parameter must be an array or an object that implements Countable in Laravel 6 ✏️ by Aditya on stackoverflow.com

fp- feedback received

@SmokeDetector v

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, link following arrow in body, +3 more (591): Emylia Cream Australia by ErnaBrow on graphicdesign.SE

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Buying Liquid Oxygen in Small Quantities by Uncertain Theory on engineering.SE

@SmokeDetector f

tpu- feedback received on Emylia Cream Australia [MS]

fp- feedback received

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, pattern-matching product name in body, pattern-matching website in body, +1 more (489): Verocity Male Enhancement Side Effects by micketater on meta.SE

tpu- feedback received

[ SmokeDetector ] FindSpam module reloaded at rev 18d41c1 (tripleee: ! Watch IP 198.54.126.127) (running on teward/Anubis)

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, link at end of body, +6 more (693): it has helpedclick2nextorder.com/tier-2-keto/ by user1112499 on superuser.com

tpu- feedback received

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, pattern-matching product name in body, +3 more (592): Evo Elite Keto - The Best Dietary Formula For Weight Loss by FrankGravl on askubuntu.com

tpu- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Revise ebay listings with CSV by StreetWare on stackoverflow.com

[ SmokeDetector | MS ] Mostly punctuation marks in answer (38): The attribute 'action' may not appear in tag 'FORM [method=POST]' while making AMP pages in asp.net by user12372033 on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): OLM to PST Converter by user12371994 on stackoverflow.com

naa- feedback received on The attribute 'action' may not appear in tag 'FORM [method=POST]' while making AMP pages in asp.net [MS]

treyBake

10:21 AM

@SmokeDetector tpu

@treyBake Registered answer as true positive and blacklisted user.

[ SmokeDetector | MS ] Url-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +11 more (1186): maleenhancementlife.com/maxatron-plus/ by himpaskio on askubuntu.com

tpu- feedback received

[ SmokeDetector ] FindSpam module reloaded at rev 4d24d2a (tripleee: ! Watch IP 198.187.31.221) (running on teward/Anubis)

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title (194): How to Buy Adderall Online USA? by John Lewis on askubuntu.com

!!/watch maxatron

tpu- feedback received

[ SmokeDetector ] Blacklists reloaded at rev 7f5a02e (SmokeDetector: Auto watch of maxatron by tripleee) (running on teward/Anubis)

!!/watch-number +1 9102127411

[ SmokeDetector ] Blacklists reloaded at rev f78a63b (SmokeDetector: Auto watch of +1 9102127411 by tripleee) (running on teward/Anubis)

treyBake

10:26 AM

@SmokeDetector naa

@treyBake Recorded answer as an NAA in metasmoke.

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, link at end of body, link following arrow in body, pattern-matching product name in body, +5 more (692): How To Consume the Keto Plus Pro Supplement? by ketoplusukpro on meta.SE

[ SmokeDetector | MS ] Potentially bad keyword in body (1): K-fold Cross Validation: Implementing stratification on the IRIS-Data set by BuriKuri on datascience.SE

fp- feedback received

[ SmokeDetector | MS ] Luncheon meat detected (40): Creating files dynamically nodejs by Jeevan Md on stackoverflow.com

[ SmokeDetector | MS ] Url in title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +5 more (591): www.autobodycu.org/dura-vital-keto/ by Siove1972 on academia.SE

tpu- feedback received

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How to interpret the coefficients table from glm? by a deleted user on stats.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Use of SAR ADC for phase angle measurement by Dhruvi Patel on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body (96): IBM cloud push notification - http/2 support for iOS by Sudharman J on stackoverflow.com

naa- feedback received on Use of SAR ADC for phase angle measurement [MS]

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, link at end of body, +7 more (987): Control X Keto :Help attain tone, lean and healthy muscle mass by lppoohoola on superuser.com

tpu- feedback received

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Samsung Mega 6.3 i9205 problem*does not have proper root* by Abdullah Alqupaty on android.SE

[ SmokeDetector ] SmokeDetector started in standby mode at rev aff3da8 (SmokeDetector: Auto watch of (?-i:^Raj$) by Machavity) (running on Makyen/Windows)

[ SmokeDetector | MS ] Url-only title, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +6 more (790): supplementgear.com/instant-keto/ by Instantpro3 on askubuntu.com

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Ignore logger function in python unit test case by Bicky on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Powershell script does not run via Scheduled Tasks by Hacktor teh Horrid on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body (96): Lenovo Thunderbolt 3 dock HDMI/DisplayPort 19.10 by sebicm on askubuntu.com

fp- feedback received on Powershell script does not run via Scheduled Tasks [MS]

[ SmokeDetector | MS ] Blacklisted user (71): CPQ-211 Salesforce CPQ Admin Essentials for Experienced Administrators by Chelsa Morrison on pm.SE

[ SmokeDetector | MS ] Manually reported question (93): Can someone answer what are the best loyalty app to reference? by May Zaw on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): navbar dropdown toggle 2nd level is not work how can i fix ✏️ by usman ali on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): button in outlook doesn't show right by Duicug on stackoverflow.com

[ SmokeDetector | MS ] Url-only title, bad keyword in body, bad keyword in username, body starts with title and ends in url, link at end of body, +8 more (882): ketoprime-diet.com by Diet Keto on askubuntu.com

tpu- feedback received

11:21 AM

Hi folks. Just dropping in to ask about this report

in Raiders of the Lost Downboat, 14 mins ago, by SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body (96): Lenovo Thunderbolt 3 dock HDMI/DisplayPort 19.10 by sebicm on askubuntu.com

apparently the "bad keyword" was Lenovo

@Zanna lenovo as part of a URL

!!/bisect /lenovo-foo

@tripleee '/lenovo-foo' is not caught by a blacklist or watchlist item.

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Issue accessing Node-Red from IBM Bluemix by Terry on stackoverflow.com

@tripleee oh :)

!!/bisect <a href="http://juho.tykkala.fi/Lenovo-Thunderbolt-3-dock-Linux" rel="nofollow noreferrer">this tutorial</a>.

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): What is the best way of dealing with the Librarians in Metro 2033? by James on gaming.SE

11:23 AM

that makes sense! Thank you

@tripleee Matched by

(?<=:?//(?:[\w-]*\.)*[\w-]*(?<![./](?:stackexchange|stackoverflow)\.com)(?<![.\/]serverfault\.com)(?<![.\/](?:superuser|askubuntu|stackapps)\.com)(?<![.\/]mathoverflow\.net)(?<![.\/](?:costco|lenovo|github)\.com)(?<![.\/](?:imgur|epson|canon|apple)\.com)(?<![.\/]asus\.com)(?<![.\/]ibm\.com)(?<![.\/]bestbuy\.com)(?<![.\/]cnet\.com)(?<![.\/]drivereasy\.com)(?<![.\/]example\.com)(?<![.\/]flipkart\.com)(?<![.\/]localserver)(?<![.\/]michael-peeters\.blogspot\.ca)(?<![.\/]microsoft\.com)(?<![.\/]needrom\.com)(?<![.\/]paytmmall\.com)(?<![.\/]projektar\.hu)(?<![.\/]r1\.ilikewallpaper\.net)(?<![.\/]usccb\.org)(?:/[\w-]*)*)/(?:(?:how-to-)?fix-(?:error-(?:\d+-in-)?)?)?(?:asus|canon|epson|fire-tv|ipad|hotmail|hp-printer|lenovo|lexmark|quickbooks)-

on line 1666 of bad_keywords.txt

I was thinking surely I'd have noticed if every post with "Lenovo" was getting reported

that's one beast of a regex

the intent is to catch fake tech support spam but they are mutating all the time so there will be some false positives

yes, I understand :) Thank you for explaining

I don't think we will want to whitelist tykkala.fi but I haven't explored the FPs

11:28 AM

fp feedback received on navbar dropdown toggle 2nd level is not work how can i fix [MS]

tpu- feedback received on CPQ-211 Salesforce CPQ Admin Essentials for Experienced Administrators [MS]

fp feedback received on Ignore logger function in python unit test case [MS]

tp feedback received on https://supplementgear.com/instant-keto/ [MS]

Glorfindel

!!/report meta.stackexchange.com/a/338251/295232

[ SmokeDetector | MS ] Manually reported answer (94): What's the ratio of "questions answered" to "questions asked" for top 10 SO countries? by Landscape Company on meta.SE

!!/blacklist-website saatchiart\.com

tpu- feedback received

[ SmokeDetector ] Blacklists reloaded at rev dd2f4f8 (SmokeDetector: Auto blacklist of saatchiart\.com by tripleee) (running on teward/Anubis)

!!/watch yardandgardenserviceshamilton\.ca

11:30 AM

[ SmokeDetector ] Blacklists reloaded at rev 723d417 (SmokeDetector: Auto watch of yardandgardenserviceshamilton\.ca by tripleee) (running on teward/Anubis)

tp feedback received on How To Consume the Keto Plus Pro Supplement? [MS]

!!/blacklist-website identifyscam\.com

[ SmokeDetector ] Blacklists reloaded at rev 24ba55e (SmokeDetector: Auto blacklist of identifyscam\.com by tripleee) (running on teward/Anubis)

11:45 AM

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword in link text in answer, pattern-matching website in answer, potentially problematic ns configuration in answer (247): How to include mp3 file in webpack build using vue-cli by ivymelda on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, link at end of body, +3 more (787): sizeable conceptwww.keto4diets.com/ksx-male-enhancement/ by user1112542 on superuser.com

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, potentially bad ip for hostname in body, potentially bad ns for domain in body, +2 more (396): What Is Krygen Xl Uk? by krygenuk14 on academia.SE

tp feedback received on sizeable concepthttp://www.keto4diets.com/ksx-male-enhancement/ [MS]

tpu- feedback received

!!/watch meldaresearch\.com