Charcoal HQ

12:01 AM

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (0): How can I automatically push after committing in git? ✏️ by Abhay Kumar on stackoverflow.com

[ SmokeDetector | MS ] Mostly punctuation marks in body (0): Desperate Need of Assistance with converting text to morse code by simanta on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, obfuscated word, phone number detected in title, potentially bad keyword in body, +1 more (0): C.oIn.base🎀 S.upPort *🎀 [1.804+454+889.5] *Ph.one* $N0V$ Coin*base pHOne_Number💋💋 by peu7qq77rvoi on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, obfuscated word, potentially bad keyword in body, several emoji in title (0): Coin*base_P-H-O-Ne Number⊹♟+/ퟏ-𝟴04𝖝↹454𝖝↹8895 ♟ 🤬 $N0V$ Coin*base_SuPpOrt NumBer by kecbqa1r2ibu on stackoverflow.com

lyxal

12:18 AM

Feels so primitive having to actually click on the question link and manually raise a spam flag instead of just using FIRE :p

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, obfuscated word, several emoji in title (0): Coin*base_p-Ho"Ne= Number⊹♟+/ퟏ-𝟴04𝖝↹454𝖝↹8895 ♟ 🤬 $N0V$ Coin*base_SuPpOrt NumBer by ttgannorgsio on stackoverflow.com

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev c9f96ba46 (tripleee: ! Watch IP pair 188.114.96.15 + 188.114.97.15) (running on Makyen/EC2-linux)

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (0): A more readable InStr: StringContains ✏️ by kennyk4silva on codereview.SE

lyxal

@SmokeDetector fp-

SmokeDetector

12:34 AM

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, obfuscated word, phone number detected in title, potentially bad keyword in body, +2 more (0): C0inBasE_🧿™🧿+1804☶454☶8895☶ Toll~Free Number♨ 🤬 $N0V$ C0inBasE_ PHonE NuMbEr by msmsoewynaib on stackoverflow.com

Warning: Makyen/EC2-linux: Last 11 connection(s) to metasmoke failed. Setting metasmoke status to down.

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, obfuscated word, phone number detected in body, phone number detected in title, +3 more (0): 🥎🟢 C0inBasE_ +1 804 454 8895 $N0V$ 🥎🟢 Supp0rt NumBer | C0inBasE_ Toll FREE nuMber by arjryieankps on stackoverflow.com

SmokeDetector

12:52 AM

[ SmokeDetector | MS ] Link at beginning of body, potentially bad keyword in body (0): How to deposit via pulsa by Deposit via xl on stackoverflow.com

Ryan M

sd why

SmokeDetector

[:59698942] Link at beginning of body - Position 0-44: <a href="https://deposit.pulsaxl.online/"
Potentially bad keyword in body - Positions 116-125, 240-249: agen slot, Position 168-179: Daftar slot

Ryan M

!!/watch pulsaxl\.online

SmokeDetector

@RyanM You don't have blacklist manager privileges, but I've created PR#6753 for you.

Ryan M

aaaargh.

SmokeDetector

12:54 AM

[ SmokeDetector | MS ] Bad keyword in body, bad phone number in body, obfuscated word, phone number detected in title, potentially bad keyword in body, +1 more (0): C0in*BasE_ 🧿 1 (804) 454–8895 $N0V$ 🧿 ToII= Free Number | Toll Free Ph.o-ne Number by qoxvrxperyhb on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, blacklisted website in answer, potentially bad keyword in answer (0): Golden Age SF short story about first contact, and a different kind of hyperspace by Brandon on scifi.SE

lyxal

@SmokeDetector tpu-

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (0): Cookieless Authentication ✏️ by fragile_frogs on security.SE

lyxal

@SmokeDetector fp-

Ryan M

sd why

SmokeDetector

@RyanM [:59699081] Potentially bad keyword in body - Position 236-242: ory.sh

Thomas Ward

1:20 AM

finally heard from Comcast - they said that given it's a holiday tomorrow they can't guarantee a fix until Friday afternoon at the earliest eastern US time. Which means MS might be down for more than 48 hours total.

4

Ryan M

Yikes, sorry to hear that. That's a really horrible response time on their part.

Hope it doesn't impact your own holiday too much.

SmokeDetector

[ SmokeDetector | MS ] Pattern-matching product name in body, potentially bad keyword in body (0): How can I pass additional params to a shortcode while in a loop? ✏️ by TechiBoy on wordpress.SE

Thomas Ward

@RyanM i'm TEMPTED to switch providers, get FIOS with a /28 but their price for a /28 IP range is even higher than Comcast's so i'm not sure about it

Makyen

@ThomasWard Well, that's unfortunate. I hope that it's not too big of an impact on everything other than MS/Charcoal. I know there's a lot more going on for you at your location that's something other than MS/SD/Charcoal.

Thomas Ward

@Makyen oh there's a lot of stuff going on here beyond MS/Charcoal including my own email system

Makyen

1:25 AM

@ThomasWard Is it just your Comcast, or is it a general Comcast issue in the area?

Thomas Ward

THANKFULLY my DNS is on CloudFlare and I run hosting via my LLC so I used an unused Exchange license in MS365 so I repointed all my email there

@Makyen comcast business specifically on this circuit i'm connected to

so a larger issue likely but no idea where the disruption is

Makyen

Comcast often uses residential customers to serve Xfinity hotspost. Do you have a WiFi Access point which you could use as a connection through such a hotspot?

Thomas Ward

@Makyen nope. not that'd work with MS

I'm tethered to my cell phone though with a 30GB limit a month per cell phone, and I have two others I can use as well

so I have internet access for myself but not for the infra

again, i'm glad I put all the DNS on Cloudflare and have extra Exchange licenses around.

strongly considering moving my mail up there and leaving it there, because it'll free a lot of resources on my compute

Makyen

@ThomasWard True. It wouldn't be possible to have the name resolve in DNS.

Thomas Ward

@Makyen nope not with the delegation that's going on.

but I have internet so that's less of a concern :p

'cause i'm reachable

Makyen

1:29 AM

:)

That's a strong benefit.

Thomas Ward

but is holiday so yay for that.

Makyen

Yeah. Bad timing on Comcast's part.

Thomas Ward

yup

@Makyen at least i'm fortunate that i run the backups locally and they won't get lost.

Makyen

@ThomasWard That helps a lot.

Thomas Ward

but also once i'm done moving my hosted mail up to MS365 and my own email to MS365 I have a LOT of space i regain in terms of ram and cpu heh

Makyen

1:33 AM

If that works out well for you, then it sounds like a reasonable thing to do. However, I don't really have anywhere near enough information to comment intelligently about if it's a good idea or not, as that's really something which only you can determine.

Thomas Ward

shrugs i can't receive email for things and that's mission critical so

even if i only use it for a month until my infra is back up or something it's worth it to have it heh

@Makyen at least my local dev sessions on my laptop aren't affected heh

so i can continue working on my pet projects/redesigns of the workplace listserv system :P

make it a lot more efficient

Makyen

If it's mission critical, then it's a really good idea to have it on something that's redundant, so that it can keep going.

SD's going down for a couple minutes. I'm adding an old list of bloacklisters...

!!/standby Makyen

SmokeDetector

Makyen/EC2-num02 is switching to standby

[ SmokeDetector ] SmokeDetector started in standby mode at rev a82b54697 (Makyen: Don't raise an exception when MS whitelist is None) (running on Makyen/EC2-num02)

[ SmokeDetector ] SmokeDetector started at rev a82b54697 (Makyen: Don't raise an exception when MS whitelist is None) (running on Makyen/EC2-num02, Python 3.7.10)

Makyen

!!/ms-down

SmokeDetector

Makyen/EC2-num02: Metasmoke status: set to down.

@Makyen Metasmoke status is now: down; Auto status switch: enabled.

Restart: API quota is 15892.

Cannot initiate MS websocket. Continuing to retry at longer intervals.

[ SmokeDetector | MS ] Link at beginning of answer (0): How to map inherited classes on database table with hibernate? by Rubik on stackoverflow.com

SmokeDetector

2:08 AM

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, blacklisted website in answer, potentially bad keyword in answer (0): How to power thin contact lenses that let us browse the internet? by Justin on worldbuilding.SE

Thomas Ward

2:21 AM

@Makyen yeah that's my goal here, but I need more money first to do that. Especially if we want failover that can update itself. Because IP ranges ain't cheap. I can probably get a second line from FiOS business in here with a single static IP for emergency failover of certain resources, but that won't fix email which is highly DNS and rDNS tied/dependent

but yeah this is why I would normally move my email to the cloud, but monz. and the resources I need is expensive, but not as expensive as paying MS365 to run the email

(email gateways are expensive for resource usage)

caird coinheringaahing

@ThomasWard So SD's still up (but reporting 0 score for everything), but MS (and feedback etc.) is likely fully down until Fri afternoon? :(

Thomas Ward

@cairdcoinheringaahing SD's score values I believe are based on MS weights. and the ISP outage here is 'regional' to the circuit i'm on, with no guaranteed fix until Friday afternoon. They said they MIGHT fix it earlier but they can't give me a guarantee because of the thanksgiving holiday here in the US

which sounds annoying, i know.

caird coinheringaahing

Wow, talk about shit timing :/

Thomas Ward

yeah tell me about it heh

caird coinheringaahing

Good luck, hope everything gets fixed asap for you :(

nobody

2:29 AM

Why doesn't stack exchange provide you guys with servers and stuff? After all, y'all are performing a valuable service for them for free...

Makyen

!!/standby Mak

SmokeDetector

Makyen/EC2-num02 is switching to standby

[ SmokeDetector ] SmokeDetector started in standby mode at rev a82b54697 (Makyen: Don't raise an exception when MS whitelist is None) (running on Makyen/EC2-num02)

Thomas Ward

@nobody hisssssssss burn their windows servers environment with fire!

nobody

:D

Thomas Ward

accidentally puts @nobody into the inferno as well ... oops

SmokeDetector

2:30 AM

[ SmokeDetector ] SmokeDetector started at rev a82b54697 (Makyen: Don't raise an exception when MS whitelist is None) (running on Makyen/EC2-num02, Python 3.7.10)

Makyen

!!/ms-down

Thomas Ward

@Makyen at least we can identify when things're broken? xD

and patch things :P

nobody

@ThomasWard well, since nobody got hurt, I guess you're fine

SmokeDetector

Restart: API quota is 15599.

Makyen/EC2-num02: Metasmoke status: set to down.

@Makyen Metasmoke status is now: down; Auto status switch: enabled.

Thomas Ward

@nobody lol accurate

SmokeDetector

2:31 AM

Cannot initiate MS websocket. Continuing to retry at longer intervals.

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Meaning of "take the yes" ✏️ by Smap on ell.SE

[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body (3): One particularly important mil spec packaging product by silwall on academia.SE

Makyen

@ThomasWard Yep. Having control of the servers helps quite a bit, even if there are some drawbacks. :;

Thomas Ward

accurate

this IS the longest outage I've had of the ISP when there's no other sane reason for it (like regional power outages due to insane chaos storms or something - THAT is when you can say "Oh, yeah, that makes sense" but not random outages like this)

@Makyen it's ALSO good when I can hop- on and make a note about why it's busted xD

but i digress

nobody

So why don't you run everything on aws or something?

Makyen

@ThomasWard Yeah, you have to give them a pass when there are insane chaos storms. :) But, this is quite a long outage for a business service. Admittedly, it's on a holiday, but, still, it's the sort of thing for which they should have people on call, even on a holiday.

Thomas Ward

@nobody CPU credits are insane on AWS

this is where MS lived before

but with the amount of CPU credits in use, it was exhausting free tier and the equivalent CPU credits on paid is just obscene.

(costs more to run MS on AWS than it costs me in electricity bills to run my entire server cluster)

nobody

2:37 AM

I see.

Thomas Ward

also keep in mind my server cluster is paid for by my LLC

so I host Metasmoke for free on my infra

while I charge clients a lot to use my infra

Makyen

It would have blown through the AWS free tier almost all the time, and that's if the person running it qualified for the free tier, which you only get for 1 year. A single SD instance can't stay within the free tier, by a considerable margin.

Thomas Ward

multiply that requirement by a TON for Metasmoke, and it gets EXPENSIVE

nobody

So is the currently running makyen instance running on the free tier?

Thomas Ward

@Makyen yeah well unless the outage is because some building exploded, they should have SOMEONE on call ~~who has no family to have thanksgiving with~~

in which case mleh

i think they're giving me a late guarantee but it's not really going to take that long

Ryan M

2:52 AM

realized I'd misread what you said

But you were too quick

(I had asked if what happened was that a building exploded, and Thomas responded "no idea")

Makyen

A quick look at the CPU credit graph for the SD instance I'm running right now shows that it's consumed about 75 CPU credits per hour (about 61 CPU credits/h over the baseline for a t3.small, which it's currently running on). That works out to $547/year in CPU credits. It would certainly be possible to purchase a machine more than capable of running SD for that amount of money.

Thomas Ward

you can almost triple or more the amount there for CPU credits for MS

i pay a lot less on my power bills over the course of a year than what the CPU credits would be for MS if it ran on AWS xD

Ryan M

I'm reminded of the time Verizon broke large portions of the internet for everyone, not just their customers, and then didn't respond to requests to fix it for at least 8 hours: blog.cloudflare.com/…

Makyen

@ThomasWard Yeah, they should. I would understand being a bit less responsive if it was for home service, but if they really want to be providing business service, then they need to be reliable.

Ryan M

Yeah, I've heard ...varied reports... about Comcast Business.

The consensus seems to be that it's better than regular Comcast, but still has issues.

Makyen

2:58 AM

@ThomasWard Yeah, that should be substantially less. Or, at least I hope it is. :;

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Would love someone to check for specific problems with my blog theme code by istionia on stackoverflow.com

Ryan M

(these are from folks using it for residential internet with better uptime )

SmokeDetector

[ SmokeDetector | MS ] Link at beginning of answer (34): Is there a data structure that can find the kth smallest in constant time with logarithmic add and delete operations? ✏️ by Vamsi Krishna Valluru on cs.SE

[ SmokeDetector | MS ] Bad ip for hostname in answer, bad keyword with a link in answer, blacklisted website in answer, potentially bad ns for domain in answer, potentially bad keyword in answer, +1 more (275): How to get truly random data, not random data fed into a PRNG seed like CSRNG's do? by fadil on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, blacklisted website in answer, potentially bad keyword in answer (267): Increase the import limit (3MB) for Contact import by Paul on civicrm.SE

[ SmokeDetector | MS ] Potentially bad keyword in title (1): What OBD tool I can use to retard/advance ignition timing? I like to experiment on GM Suburban to burn hydrogen instead of gas by Wiz007 on mechanics.SE

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, blacklisted website in answer, potentially bad keyword in answer (267): Import contact group from outlook - excel vba by Paul on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, blacklisted website in answer, potentially bad keyword in answer (267): Working with CSV file to send mail by Carlos on superuser.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Killed all keyboard entry whilst fiddling with xkb ✏️ by Jon on askubuntu.com

[ SmokeDetector | MS ] Link at beginning of body (41): Which SEC filing contains top shareholder information? by deanstreet on quant.SE

SmokeDetector

3:41 AM

[ SmokeDetector | MS ] Few unique characters in body, no whitespace in body, no whitespace in title (263): DoneDoneDoneDoneDone ✏️ by Gokux23 on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ns for domain in body, potentially bad keyword in body (2): Quạt Công Nghiệp by systemfan12 on meta.SE

Ryan M

sd why

SmokeDetector

[:59700011] Potentially bad keyword in body - Position 3-15: Systemfan.vn, Positions 51-63, 147-159, 2352-2364, 2391-2403, 2439-2451, 2616-2628, 2681-2693: systemfan.vn
Potentially bad ns for domain in body - systemfan.vn NS suspicious ns4.tenten.vn.,ns6.tenten.vn.,ns5.tenten.vn.

SmokeDetector

4:07 AM

[ SmokeDetector | MS ] Bad ip for hostname in answer, bad keyword with a link in answer, blacklisted website in answer, link at end of answer, potentially bad ns for domain in answer, +2 more (336): Asian characters display on the same webpage, some well and some not by fadil on superuser.com

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Couchbase APIs, libraries or curl commands to copy data from one cluster to another by Udit Jindal on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How to pass values in front end react js to backend springboot by Liam on stackoverflow.com

SmokeDetector

4:39 AM

[ SmokeDetector | MS ] Potentially bad keyword in username (1): Command not found - Oh-My-Zsh ✏️ by Sakshi on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in username (1): GitHub actions for ARM deployment by Sahil Saini on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Web scraping 2020 data from IPL website. Getting an IndexError by Raksha on stackoverflow.com

[ SmokeDetector | MS ] Blacklisted website in answer, link at beginning of answer, misleading link, potentially bad ip for hostname in answer, potentially bad ns for domain in answer, +1 more (155): sudo update-grub not working by Peter John on askubuntu.com

SmokeDetector

5:02 AM

[ SmokeDetector | MS ] Link at beginning of answer (34): Samsung S6 Active Will Not Boot, AP Rom Flash Succeeds (Bootloader Flash Fails - EDIT: BL Flash Works, Device Still Won't Boot) by Joe Munden on android.SE

[ SmokeDetector | MS ] Linked punctuation in body (26): problem with ImGizmo implementation in OpenGL by Lemonade on stackoverflow.com

SmokeDetector

5:28 AM

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): i need to count each city by AZZ Az on stackoverflow.com

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, link following arrow in body, +2 more (491): Botanical Farms CBD Gummies supplement have any side effects? by olivajou on meta.SE

SmokeDetector

5:41 AM

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Safest / most profittable platform/exchange to sell XMR for BTC (no KYC) by paulj on monero.SE

[ SmokeDetector | MS ] Link at end of answer (61): Safest / most profittable platform/exchange to sell XMR for BTC (no KYC) by Fred on monero.SE

[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially bad keyword in body (2): Not seeing my Balance? by Tommo on monero.SE

[ SmokeDetector | MS ] Link at beginning of answer, potentially bad keyword in answer (35): Do helicopter rotor tips regularly go supersonic? by Sportszone on aviation.SE

[ SmokeDetector | MS ] Mostly punctuation marks in body (28): Compare a list with nested list and get the best possible combination in python by Vishnu Sreenath on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword with a link in answer (81): Do helicopter rotor tips regularly go supersonic? by JP Dewa on aviation.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Monero fiat on-ramps and off-ramps in Australia? by Nostos on monero.SE

Ryan M

!!/watch 66\.29\.137\.222

SmokeDetector

@RyanM That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body Append -force to the command if you really want to add this pattern.

Ryan M

@SmokeDetector why

SmokeDetector

@RyanM Bad keyword with a link in answer - Keyword Visit my website with link <a href="http://66.29.137.247/"

Ryan M

huh, that's not what the post says...

sdc scan-force aviation.stackexchange.com/a/90410/53472

SmokeDetector

5:52 AM

[ SmokeDetector | MS ] Link at beginning of answer, potentially bad keyword in answer (35): Do helicopter rotor tips regularly go supersonic? by Sportszone on aviation.SE

Ryan M

sd why

SmokeDetector

[:59700882] Link at beginning of answer - Position 0-33: <a href="http://66.29.137.222"
Potentially bad keyword in answer - Position 19-32: 66.29.137.222, Position 60-73: Nonleaguezone

Ryan M

!!/watch 66\.29\.137\.247

SmokeDetector

@RyanM You don't have blacklist manager privileges, but I've created PR#6754 for you.

[ SmokeDetector | MS ] Potentially bad ip for hostname in answer (1): Can self-signed SSL certificate be renewed? How? by Alex Robinson on superuser.com

Ryan M

@SmokeDetector why

SmokeDetector

5:53 AM

@RyanM Potentially bad keyword in answer - Positions 454-468, 505-519: localmonero.co, Position 521-709: a> is an escrow service that facilitates peer-to-peer trades for Monero against fiat or other currencies. Australia is supported and you will find many vendors there who are willing to buy, Position 1007-1015: griefers

Ryan M

@SmokeDetector k

oh there are two spam answers on that question

!!/watch jpdewa

SmokeDetector

@RyanM You don't have blacklist manager privileges, but I've created PR#6755 for you.

[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): An example of a Lipschitz function of a Gaussian vector for which $f(Z)-\mathbb{E}[f(Z)]$ is not sub-Gaussian by Pablo Ortega on mathoverflow.net

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Convert PDF to Epub, advanced features by Mithlesh on ebooks.SE

Ryan M

@SmokeDetector why

SmokeDetector

@RyanM Potentially bad keyword in answer - Position 235-241: Aryson

Ryan M

@SmokeDetector spam-

@SmokeDetector still up

SmokeDetector

6:14 AM

[ SmokeDetector | MS ] Non-latin link in answer, username similar to website in answer (144): Modal or new Page for product description? by safesho on ux.SE

Makyen/EC2-linux: Executing automatic scheduled reboot.

[ SmokeDetector ] SmokeDetector started in standby mode at rev c9f96ba46 (tripleee: ! Watch IP pair 188.114.96.15 + 188.114.97.15) (running on Makyen/EC2-linux)

[ SmokeDetector | MS ] Repeating characters in answer (79): multisign locked lobstr vault custom sign my wallet public key active by ari hermawan on stellar.SE

[ SmokeDetector | MS ] Bad keyword in body, potentially bad keyword in body (96): How to Get Trust Slot Site by Alethata on poker.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Is working as a model a good way to learn photography? by mawar jingga on photo.SE

Ryan M

6:34 AM

@SmokeDetector why

SmokeDetector

Bad keyword in body - Position 62-72: situs judi
Potentially bad keyword in body - Position 68-84: judi slot online, Position 85-92: terbaik

Ryan M

!!/watch kasimpasaspor\.org

SmokeDetector

@RyanM You don't have blacklist manager privileges, but I've created PR#6756 for you.

Ryan M

@SmokeDetector why

SmokeDetector

@RyanM Potentially bad keyword in answer - Positions 116-127, 240-251: unair.ac.id

[ SmokeDetector | MS ] Non-latin link in answer (77): Problem in the order of closing the modal in bootstrap by Mohammad Golmohammadi on stackoverflow.com

Ryan M

6:35 AM

@SmokeDetector spam-

SmokeDetector

Warning: Makyen/EC2-linux: Last 11 connection(s) to metasmoke failed. Setting metasmoke status to down.

[ SmokeDetector | MS ] Link at beginning of body (41): Phoenix Store one of the Leading Bitcoin Mining hardware Retailers by Phoneix Store on stackoverflow.com

Ryan M

!!/watch phoenix\.store

SmokeDetector

@RyanM You don't have blacklist manager privileges, but I've created PR#6757 for you.

Ryan M

sdc whois blacklister

SmokeDetector

@RyanM I hit an error while trying to run that command; run !!/errorlogs for details.

SmokeDetector

6:55 AM

[ SmokeDetector | MS ] Luncheon meat detected (41): How to fix pygame android module SDL2 Issue by PokeyManatee4 on stackoverflow.com

[ SmokeDetector | MS ] Bad ns for domain in body, potentially bad ip for hostname in body (97): Which is the best platform to develop your mobile app? by martin on stackapps.com

tripleee

!!/watch dotcominfoway\.com

SmokeDetector

@tripleee You don't have blacklist manager privileges, but I've created PR#6758 for you.

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Deep space marksmanship; will DART's intercept and impact trajectory represent the best ever if successful? If so, by how much? by TheEnderAstronaut on space.SE

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Is masturbation permissible for a man during an extended period of unmarried life? ✏️ by a deleted user on islam.SE

Makyen

7:23 AM

!!/standby Mak

SmokeDetector

Makyen/EC2-num02 is switching to standby

[ SmokeDetector ] SmokeDetector started in standby mode at rev a82b54697 (Makyen: Don't raise an exception when MS whitelist is None) (running on Makyen/EC2-num02)

[ SmokeDetector ] SmokeDetector started at rev a82b54697 (Makyen: Don't raise an exception when MS whitelist is None) (running on Makyen/EC2-num02, Python 3.7.10)

Makyen

!!/ms-down

SmokeDetector

Makyen/EC2-num02: Metasmoke status: set to down.

@Makyen Metasmoke status is now: down; Auto status switch: enabled.

Restart: API quota is 13636.

Cannot initiate MS websocket. Continuing to retry at longer intervals.

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Creating your first programming language is easier than you think? ✏️ by a deleted user on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, bad pattern in url body, blacklisted website in body, pattern-matching website in body, +2 more (477): Seven Reasons Why People Love Eagle Hemp CBD Gummies Reviews by SteveRockar on apple.SE

Makyen

7:38 AM

!!/pull

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev d597bafbe (Makyen: Merge branch 'auto-blacklist-1637823700' of makyen-GitHub:Charcoal-SE/SmokeDetector.git) (running on Makyen/EC2-num02)

[ SmokeDetector | MS ] Bad keyword in answer, potentially bad ip for hostname in answer, potentially bad keyword in answer, username similar to website in answer (156): Does factory girl call the model? by Goa Dreams on stackoverflow.com

[ SmokeDetector | MS ] Link at beginning of body (41): How Can I Make This Ripple Effect better? Unity ✏️ by Habib Ismail on stackoverflow.com

tripleee

@SmokeDetector why

SmokeDetector

Bad keyword in answer - Position 43-53: call-girls, Position 89-99: Call Girls
Potentially bad ip for hostname in answer - goadreams.com suspicious IP address 66.235.200.112
Potentially bad keyword in answer - Position 29-42: goadreams.com
Username similar to website in answer - Username `Goa Dreams` similar to *goadreams* at position 29-38, ratio=1.0

[ SmokeDetector | MS ] Potentially bad keyword in body (1): NFT MINTING platform by NFT LISTING SERVICES on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer, link at beginning of answer, potentially bad keyword in answer (122): NFT MINTING platform by NFT LISTING SERVICES on stackoverflow.com

[ SmokeDetector | MS ] Pattern-matching website in body, potentially bad keyword in body (97): Google Maps Scraping by Brijesh Prajapati on stackoverflow.com

Cody Gray

@SmokeDetector why

SmokeDetector

Pattern-matching website in body - Position 331-343: infotech.com
Potentially bad keyword in body - Positions 328-343, 403-418: hirinfotech.com

Cody Gray

7:51 AM

@SmokeDetector why

SmokeDetector

@CodyGray Potentially bad keyword in body - 919870635001 found normalized

tripleee

!!/blacklist-number +919870635001

SmokeDetector

@tripleee You don't have blacklist manager privileges, but I've created PR#6759 for you.

Cody Gray

Argh.

!!/approve 6759

SmokeDetector

@CodyGray You need blacklist manager privileges to approve pull requests

Cody Gray

7:52 AM

@SmokeDetector why

SmokeDetector

@CodyGray Link at beginning of body - Position 0-63: <a href="https://gyazo.com/3eed4fe64b151b7f5a75fba2cee072f8"

Cody Gray

@SmokeDetector fp-

!!/bisect nadcab.com/nft-minting-platform-development-company-india

SmokeDetector

@CodyGray Matched by nadcab\.com on line 30176 of watched_keywords.txt

[ SmokeDetector | MS ] Body starts with title and ends in url, potentially bad keyword in body (98): Bệnh gout cấp tính by user17375182 on retrocomputing.SE

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Ladder Operators and Angular momentum by ricklemypickle on physics.SE

Cody Gray

@SmokeDetector tpu-

@SmokeDetector fp-

Ryan M

@SmokeDetector why

SmokeDetector

8:03 AM

Body starts with title and ends in url - Body starts with title and ends in URL: https://diemchau.net/benh-gout-cap-tinh-la-gi/
Potentially bad keyword in body - Positions 411-423, 485-497: diemchau.net

Ryan M

@SmokeDetector still up

SmokeDetector

[ SmokeDetector | MS ] Mostly punctuation marks in answer (35): No overload for method 'ToDictionary' takes 0 arguments by Mohammed Magdy on stackoverflow.com

Cody Gray

@SmokeDetector fp-

Ryan M

@SmokeDetector still up

SmokeDetector

[ SmokeDetector | MS ] Offensive answer detected (78): Copy_Paste_Visible_Cells_Only by Ranu Basuki on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body (3): Ways To Turn Off VPN On iPhone by freevpntutorials on unix.SE

Makyen/EC2-num02: SE WebSocket: recovered from BrokenPipeError: [Errno 32] Broken pipe

[ SmokeDetector | MS ] Few unique characters in answer, mostly punctuation marks in answer (123): Why did Odysseus pretend to be Helen's suitor if he wanted to win Penelope? by Kyrissa on mythology.SE

tripleee

8:08 AM

@SmokeDetector f stupid typo edited

Ryan M

@SmokeDetector why

SmokeDetector

Potentially bad ip for hostname in body - freevpntutorials.com suspicious IP address 107.20.41.246
Potentially bad keyword in body - Position 517-537: freevpntutorials.com
Potentially bad ns for domain in body - freevpntutorials.com NS suspicious ns70.domaincontrol.com.,ns69.domaincontrol.com.

Ryan M

@SmokeDetector spam-

tripleee

I only see two previous hits in Halflife's logs and no other use of the IP address so hard to call that a campaign, though plenty of circumstantial evidence to suggest we might want to blacklist freevpntutorials.com

both previous hits last Friday chat.stackexchange.com/…

Ryan M

Alas, all the blacklisters have been unceremoniously sacked by Comcast.

SmokeDetector

8:12 AM

[ SmokeDetector | MS ] Link at beginning of body, potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body (44): Delhi Police Head Constable, Constable, CPO SI Training Institute by delhipolice physicaltraining on superuser.com

tripleee

as long as Github is still up we can push in changes if we really want to, but I would just sit it out until we get back metasmoke

SmokeDetector

[ SmokeDetector | MS ] Obfuscated word, phone number detected in title, potentially bad keyword in body (69): Bi.Nan.Ce sUpPo.rT NuMb.Er ((+1.86.64.l42.29'3)) Bi.Nan.Ce He.LPL.Ine SuPPo.rt by oocvhf on stackoverflow.com

tripleee

!!/watch-number 9911831160

SmokeDetector

@tripleee You don't have blacklist manager privileges, but I've created PR#6760 for you.

tripleee

!!/watch delhipolicephysicaltraining\.com

SmokeDetector

8:13 AM

@tripleee You don't have blacklist manager privileges, but I've created PR#6761 for you.

tripleee

@SmokeDetector why

SmokeDetector

Obfuscated word - 'Bi.Nan.Ce' is obfuscated 'binance'
Obfuscated word - 'sUpPo.rT' is obfuscated 'support'
Phone number detected in title - Phone number: 1866414229
Potentially bad keyword in body - Positions 1093-1105, 1378-1390: trust wallet

tripleee

!!/watch-number +1.86.64.l42.29'3

!!/watch-number 86.64.l42.29'3

SmokeDetector

@tripleee You don't have blacklist manager privileges, but I've created PR#6762 for you.

@tripleee You don't have blacklist manager privileges, but I've created PR#6763 for you.

[ SmokeDetector | MS ] Offensive body detected, potentially bad keyword in body, toxic body detected (103): This weird error happens to only 0.01% of C# scripts I write ✏️ by lelt on stackoverflow.com

tripleee

@SmokeDetector the "Obfuscated word" rule should mention that the first one comes from the title and the second from the body

SmokeDetector

8:16 AM

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): What happens when Heroku Papertrail logging reaches 10 MB daily limit? by a deleted user on stackoverflow.com

tripleee

it could find more but it returns as soon as it finds the first one in the text it is examining (title, post content, user name)

Makyen

!!/standby Mak

SmokeDetector

Makyen/EC2-num02 is switching to standby

[ SmokeDetector ] SmokeDetector started in standby mode at rev d597bafbe (Makyen: Merge branch 'auto-blacklist-1637823700' of makyen-GitHub:Charcoal-SE/SmokeDetector.git) (running on Makyen/EC2-num02)

[ SmokeDetector ] SmokeDetector started at rev d597bafbe (Makyen: Merge branch 'auto-blacklist-1637823700' of makyen-GitHub:Charcoal-SE/SmokeDetector.git) (running on Makyen/EC2-num02, Python 3.7.10)

tripleee

@SmokeDetector rude comments / troll

SmokeDetector

Restart: API quota is 13227.

Cannot initiate MS websocket. Continuing to retry at longer intervals.

[ SmokeDetector | MS ] Bad keyword in answer, link at beginning of answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer, +1 more (191): Set vpn connection on ubuntu server by freevpntutorials on askubuntu.com

Makyen/EC2-num02: In getting MS post information, recovered from

requests.exceptions.ConnectionError: HTTPSConnectionPool(host='metasmoke.erwaysoftware.com', port=443): Max retries exceeded with url: /api/v2.0/posts/urls?key=[METASMOKE KEY REDACTED]&filter=GHOOIJGNLKHIIOIKGILKIJGHFMNKKGFJ&urls= (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7f49ce6b6710>: Failed to establish a new connection: [Errno -2] Name or service not known'))

[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title (193): Car Rental DUbai is helping people to explore the city by Fawad Amex on superuser.com

Makyen

8:22 AM

!!/ms-down

SmokeDetector

Makyen/EC2-num02: Metasmoke status: set to down.

@Makyen Metasmoke status is now: down; Auto status switch: enabled.

[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): ONLY 0.005% CAN BEAT THIS LEVEL by MOBAD on stackoverflow.com

Ryan M

!!/watch marblecoloringdeluxe\.io

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev a7811b647 (SmokeDetector: Auto watch of marblecoloringdeluxe\.io by Ryan M) (running on Makyen/EC2-num02)

Ryan M

...oh hey

@SmokeDetector why

SmokeDetector

Bad keyword in body - Position 6-22: Car Rental Dubai, Position 333-349: car rental Dubai
Bad keyword in title - Position 0-16: Car Rental DUbai

[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Filtering certain coins based upon name with CoinMarketCap ✏️ by Artyom Kuteynikov on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer, link at beginning of answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer, +1 more (191): How to add openvpn connection in the GUI using .ovpn .p12 and .key files by freevpntutorials on askubuntu.com

tripleee

8:28 AM

!!/watch (?-i:^freevpntutorials$)

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev dbf9c9f92 (SmokeDetector: Auto watch of (?-i:^freevpntutorials$) by tripleee) (running on Makyen/EC2-num02)

tripleee

!!/blacklist-website freevpntutorials\.com

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 84eea7506 (SmokeDetector: Auto blacklist of freevpntutorials\.com by tripleee) (running on Makyen/EC2-num02)

tripleee

@SmokeDetector previous answer by same OP was deleted as spam by a mod, but I guess this is borderline

@tripleee unsurprisingly they took care of that themselves

SmokeDetector

[ SmokeDetector | MS ] Bad keyword with email in body, potentially bad ip for hostname in title (56): I found this string in one of my employee's email sent item, what this can be? (',"myempname@mycompanywebsite.com","HIS_PASSWORD",') by Muhammad Nouman on stackoverflow.com

tripleee

8:35 AM

@SmokeDetector still up, junk post

Makyen

!!/pull

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 3f56031ee (SmokeDetector: Auto watch of 86.64.l42.29'3 by tripleee) (running on Makyen/EC2-num02)

Makyen/EC2-num02: SE WebSocket: recovered from BrokenPipeError: [Errno 32] Broken pipe

[ SmokeDetector | MS ] Bad keyword in body (95): Input and output format python by adam03034 on stackoverflow.com

[ SmokeDetector | MS ] Bad keyword in answer, bad keyword with email in answer, blacklisted website in answer, potentially bad keyword in answer (267): Is it illegal to send email to someone’s work account? by Jose on law.SE

[ SmokeDetector | MS ] Blacklisted website in body (99): How to avoid Selenium webdriver from being detected as bot? by NoobDev on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How to match two character at a time in regex? by Shreyans Bhansali on stackoverflow.com

[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in title, blacklisted website in body, blacklisted website in title, +4 more (785): Buy @ bulk-cbd-oil.jimdosite.com/ by Borre Grona on askubuntu.com

Makyen/EC2-num02: SE WebSocket: recovered from BrokenPipeError: [Errno 32] Broken pipe

Cody Gray

9:04 AM

@SmokeDetector ignore-

@SmokeDetector tpu-

tripleee

@SmokeDetector still up

Cody Gray

@SmokeDetector tpu-

tripleee

@tripleee still still up

Cody Gray

@SmokeDetector fp-

Not sure if it's useful to give feedback when MS is down?

SmokeDetector

Makyen/EC2-num02: SE WebSocket: recovered from BrokenPipeError: [Errno 32] Broken pipe

Cody Gray

9:12 AM

Quick, fix the pipe! Internet is leaking out all over the floor!

tripleee

@CodyGray not really, though some industrious soul might be able to uncover it and find it actually useful through loads of manual effort

Cody Gray

I think Makyen's got enough to do

tripleee

indeed!

Makyen

Actually, I'm already working on it.

Cody Gray

hahaha.

Makyen

9:17 AM

No, really... I'm implementing a queue in which SD will store what it would have sent to MS. It's not yet clear that we'll have a way to play it back and send it correctly (i.e. still unimplemented), or that MS will be able to put things as happening at the right times (it could receive them, but there's no time offset, but the first step is to not loose the data.

Cody Gray

I wasn't laughing out of disbelief.

Makyen

Ahh... then I misunderstood. :; Sorry about that.

Cody Gray

It was more of an "of course you [already] are" kind of laugh. A subtle difference, probably not readily perceptible over text, of course.

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body (1): can you make my channel 1k plus subs in less than 1 month? by Anshuman Tiwari on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad keyword in body (1): The outbreak of the new crown epidemic by master27769313 on stackoverflow.com

tripleee

@SmokeDetector why

SmokeDetector

9:27 AM

@tripleee Potentially bad keyword in body - Position 0-36: <a href="https://www.youtube.com/

Cody Gray

!!/watch (?-i:UC7tm7ViIfo2gbLDDZmBxduw)(?# YouTube)

@SmokeDetector why

tripleee

@SmokeDetector curiously, deleted by OP

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev ff684527c (SmokeDetector: Auto watch of (?-i:UC7tm7ViIfo2gbLDDZmBxduw)(?# YouTube) by Cody Gray) (running on Makyen/EC2-num02)

@CodyGray Potentially bad keyword in body - Positions 4-14, 16-26, 258-268: Yan Limeng

Cody Gray

@tripleee Two previous instances, both self-deleted, too.

@SmokeDetector tpu-

SmokeDetector

Makyen/EC2-num02: SE WebSocket: recovered from BrokenPipeError: [Errno 32] Broken pipe

[ SmokeDetector | MS ] Potentially bad keyword in body (1): Bent/Dented Dishwasher Door - How Repairable Is This? by EpiGrad on diy.SE

Cody Gray

9:36 AM

@SmokeDetector why

SmokeDetector

@CodyGray Potentially bad keyword in body - Position 541-745: a>I confess I'm a novice to appliances, and given the time of year, I'm trying to gauge if this is fixable by a service provider, or if this is the kind of thing that results in just having to buy

Cody Gray

..."service provider", I guess.

@SmokeDetector fp-

tripleee

actually it seems to be looking for "buy" inside a hyperlink, except it fails to correctly anchor the text

Robert Longson

!!/report meta.stackexchange.com/questions/372234/…

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body, bad phone number in body, bad phone number in title, obfuscated word, phone number detected in title (363): C'oinbase-🎀 1/806/491/7600/ S.upport-Numbe.r $$26$N0V$ Co'inbase_CUStOmEr CAre nUmbEr by Avtar Gill on stackoverflow.com

[ SmokeDetector | MS ] Potentially bad ns for domain in body, potentially bad keyword in title (2): lightning it solution is mainly a digital marketing company but also offering web, mobile, & desktop software solutions by lightning000001 on meta.SE

Cody Gray

9:41 AM

Wow, very slow on that spam, SD.

@SmokeDetector tpu-

SmokeDetector

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Are you worried how to find best digital marketing company? by Actual SEO Media Inc on stackoverflow.com

tripleee

!!/watch lightningitsolution\.pk

Cody Gray

@SmokeDetector why

SmokeDetector

[ SmokeDetector ] Blacklists reloaded at rev 737696a94 (SmokeDetector: Auto watch of lightningitsolution\.pk by tripleee) (running on Makyen/EC2-num02)

Potentially bad keyword in body - Position 42-59: Digital Marketing, Positions 98-115, 271-288: digital marketing, Positions 412-430, 493-511: actualseomedia.com
Potentially bad keyword in title - Position 33-50: digital marketing

tripleee

third hit so far, no other hits for that IP address 67.227.193.50

in Charcoal Test, Sep 6 at 6:31, by Halflife

halflife:2021-09-06 06:31:03,491:324137: actualseomedia.com: ns ['ns.liquidweb.com.', 'ns1.liquidweb.com.']

too common to conclude anything from

reverse DNS suggests another one to watch when we are less busy

tripleee$ host 67.227.193.50
50.193.227.67.in-addr.arpa domain name pointer cloudvpsserver.asmseo.com.

SmokeDetector

9:46 AM

Makyen/EC2-num02: SE WebSocket: recovered from BrokenPipeError: [Errno 32] Broken pipe

[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): Pandoc and Obsidian.md - Two questions: Markdown blockquotes to be rendered in .docx? And how do I input Zotero citations in pandoc/the plugin? by ReaderGuy42 on stackoverflow.com

Cody Gray

@SmokeDetector fpu-

SmokeDetector

[ SmokeDetector | MS ] Bad keyword in body (95): How to format local phone numbers to international phone numbers automaticall(auto detect country code) in flutter by Ini Hood on stackoverflow.com

tripleee

@SmokeDetector f

Transcript for