« first day (3341 days earlier)      last day (777 days later) » 
00:00 - 11:0011:00 - 00:00

00:15
[ SmokeDetector | MS ] Bad keyword in answer, potentially bad asn for hostname in answer, potentially bad keyword in answer (90): Sizing images in posts - original size in link‭ by Surapati Maraja‭ on meta.SE (@Ollie)
!!/watch- capital-gains\.co
PR#7471 ("Vickel: Watch capital-gains\.co") opened by SmokeDetector
!!/watch- CAPITAL-GAINS\.CO
PR#7472 ("Ethan: Watch CAPITAL-GAINS\.CO") opened by SmokeDetector
00:18
to slow :(
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): How to make money online‭ by emsurerj‭ on gaming.SE
tpu- feedback received on [MS] How to make money online‭
!!/watch- 𝕒𝕗𝕗\.𝕤𝕥𝕒𝕜𝕖𝕔𝕦𝕥\.𝕔𝕠𝕞
@Ethan That pattern looks like it's already caught by Mostly non-latin body and Mostly non-latin answer Append -force to the command word(s) if you really want to add the pattern you provided.
!!/watch-force- 𝕒𝕗𝕗\.𝕤𝕥𝕒𝕜𝕖𝕔𝕦𝕥\.𝕔𝕠𝕞
00:24
PR#7473 ("Ethan: Watch 𝕒𝕗𝕗\.𝕤𝕥𝕒𝕜𝕖𝕔𝕦𝕥\.𝕔𝕠𝕞") opened by SmokeDetector
Might also want to watch the punycode version.
whats punycode?
It's the alternate encoding of a homoglyph domain: en.wikipedia.org/wiki/Punycode
It's how IDNs work: en.wikipedia.org/wiki/Internationalized_domain_name. E.g. Bücher.example is xn--bcher-kva.example.
01:03
@SmokeDetector k
@SmokeDetector f
sdc approve 7471
sdc reject 7472 "Accidental duplicate of PR 7471."
@Ollie Closed pull request #7472.
[ SmokeDetector | MS ] Link at beginning of body (41): watches gogogo a good choice?‭ by Elfwatch‭ on meta.SE (@Ollie)
tpu- feedback received on [MS] watches gogogo a good choice?‭
01:14
sdc watch- watchesbiz\.co
!!/watch- atchesbiz\.co
oops
deleted the w
PR#7474 ("Ethan: Watch atchesbiz\.co") opened by SmokeDetector
sdc reject 7474 "Accidental duplicate of my watch; this PR is also missing a letter"
01:15
@Ollie Closed pull request #7474.
@Ethan All okay :) Good to see you're on the ball, though.
just make sure the watch is identical to the reported one before sending, if you copy/paste instead of using a script
01:44
!!/approve 7473
@Spevacus Are you sure this watch will catch anything the "mostly latin" body reason wouldn't? I didn't approve it because MS doesn't like that search, whether regex or like matches.
Besides that, watching the domain only would catch more spam if that website is used again, as there are other subdomains
02:05
teward/Thoth: Executing automatic scheduled reboot.
Restart: API quota is 78562.
[ SmokeDetector | MS ] Link at end of answer (62): Blogger widgets HTML‭ by abdalrahman mahmoud‭ on stackoverflow.com
tpu- feedback received on [MS] Blogger widgets HTML‭
!!/watch- apps2link\.store
PR#7475 ("Ethan: Watch apps2link\.store") opened by SmokeDetector
02:21
@Ollie I figured it'd, at least, catch the existing pattern if it shows up again. A more proper watch would also handle other homoglyph obfuscation, but... That's a lot to ask of a PR.
03:17
[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to add timed captions in an recorded expo video?‭ by reactNoob‭ on stackoverflow.com
Makyen/MS-Relay: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 6b79b1731 (Makyen: Ping Makyen for some new metasmoke users) (running on Makyen/MS-Relay, Python 3.11.0)
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Where to get affordable tools for security‭ by thelast‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): Wifi 6 network not showing in available networks‭ by user1762821‭ on superuser.com
!!/watch tlsguns\.com
[ SmokeDetector | MS ] Blacklisted website in body, potentially bad keyword in body (99): How to make money faster?‭ by Fz _Madra‭ on gaming.SE
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Gatling switch protocols during scenario‭ by Nihal_Mohammed‭ on stackoverflow.com
@SmokeDetector tpu-
04:05
[ SmokeDetector | MS ] Pattern-matching website in answer (76): How to temporarily remap colors on laptop display‭ by Khan‭ on superuser.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Selenium WebDriver ✏️‭ by marcel‭ on pt.stackoverflow.com
04:24
[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected (158): How to divide a string into equal groups of n characters padded with blank spaces in Java?‭ by user20970860‭ on stackoverflow.com
[ SmokeDetector | MS ] Phone number detected in title, potentially bad keyword in body, potentially bad keyword in title, scam aimed at customers in body, several emoji in title (257): Air Canada Airlines Booking Number 👨🏻‍💼⥠-806-370-1737👨🏻‍💼‭ by jamesnerry‭ on stackoverflow.com
!!/blacklist-number 1-806-370-1737
04:32
!!/watch bacancytechnology\.com
@CodyGray That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer Append -force to the command word(s) if you really want to add the pattern you provided.
!!/approve 7475
[ SmokeDetector | MS ] Blacklisted website in body, potentially bad ns for domain in body, potentially bad keyword in body, potentially bad keyword in title, blacklisted user (172): 5 website to make money online?‭ by Fz _Madra‭ on gaming.SE
@tripleee I definitely don't remember. It's possible that I wanted them to be explicitly not case-sensitive, and I didn't remember that that was the default... I would check to see what the detections are (TPs and FPs) with and without case sensitivity if I were you, rather than just assuming they're meant to be case-sensitive.
tpu- feedback received on [MS] 5 website to make money online?‭
04:43
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Circle moving out of window‭ by The Raw Coconut‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Sent USDC to wrong chain on gnosis. Need to recover‭ by reppen‭ on ethereum.SE
[ SmokeDetector | MS ] Blacklisted website in answer, link at end of answer, potentially bad ip for hostname in answer, username similar to website in answer (227): Wordpress pages redirecting to Home page‭ by travelmykashmir‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): which framework for an online mulitplayer boardgame‭ by Michael‭ on boardgames.SE
@SmokeDetector The other posts for that domain use the same format of them claiming an issue with their site, so I presume this is spam too
!!/watch tlsguns\.com
@tripleee That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer Append -force to the command word(s) if you really want to add the pattern you provided.
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body (2): Where can I buy home décor items at a low price? ✏️‭ by Select Weiber‭ on superuser.com
!!/watch presenthem\.com
!!/watch drhsports\.com
!!/watch pickcheaplaptops\.com
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad ns for domain in answer (2): Component ID: AA3 03‭ by steve kwok‭ on electronics.SE
fp- feedback received on [MS] Component ID: AA3 03‭
06:06
@SmokeDetector naa
@tripleee Recorded answer as an NAA in metasmoke.
[ SmokeDetector | MS ] Shortened url in answer (58): Calculation of bucks missing‭ by Ishaque‭ on math.SE
[ SmokeDetector | MS ] Bad ip for hostname in body, bad ns for domain in body, bad keyword in body, bad keyword in title, blacklisted website in body, +2 more (679): German Language Classes in Pune‭ by Gurpreetsingh‭ on superuser.com
tpu- feedback received on [MS] Calculation of bucks missing‭
!!/watch (?-i:3GQe6zF)(?# bit.ly)
!!/watch diamond[\W_]*trump
06:08
tpu- feedback received on [MS] German Language Classes in Pune‭
svnforu was already watched yesterday for a similar spam
06:20
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector | MS ] Potentially bad keyword in answer, shortened url in answer, blacklisted user (130): Lakers and Bucks arrangements‭ by Ishaque‭ on math.SE
tpu- feedback received on [MS] Lakers and Bucks arrangements‭
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): Transfer VoiceRecorder files to Windows 11 PC from iPhone6‭ by Monty Perrotti‭ on superuser.com
06:40
[ SmokeDetector | MS ] Bad ns for domain in answer, blacklisted username, blacklisted website in answer (264): RFID extension cable‭ by coinshen1‭ on ham.SE
tp feedback received on [MS] RFID extension cable‭
CI on cf2a091 succeeded.
[ SmokeDetector ] GitHub Actions: success on cf2a091 by tripleee in the master branch
!!/pull
06:59
[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad keyword in answer (95): Unable to install Microsoft office 2016 professional plus‭ by tobylykins‭ on superuser.com
!!/watch best2in1laptops\.com
[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, blacklisted website in body, potentially bad keyword in body, potentially bad keyword in username (293): Is Java useful for the future?‭ by kosmik technologies pvt ltd‭ on serverfault.com
tpu- feedback received on [MS] Is Java useful for the future?‭
!!/watch-number 8712186898
07:06
@CodyGray That pattern may be a North American number. If it is, please use a format which starts with an optional 1 followed by possible separator text and has the main number in the format 871-218-6898 where - could be a single alpha character or any [\W_]*+. Alternately, you can add the comment (?#IS NorAm) to the end of the pattern to force also using the alternate normalized form, or (?#NO NorAm) if it's not a North American phone number and it's incorrectly recognized as one. Perhaps try !!/watch-number 871-218-6898. Append -force to the command word(s) if you really want to add the pattern you provided.
I have no idea if it is or not.
!!/watch-number +91-8712186898
@CodyGray A normalized version, {{'918712186898'}}, of that pattern is already on the number watchlist. You can use !!/bisect-number +91-8712186898 to determine which entries on the number lists match that pattern, which would tell you: Matched by +91-8712186898 on line 3029 of watched_numbers.txt: +91-8712186898 found verbatim
!!/watch-number +91-8179496603
@CodyGray A normalized version, {{'918179496603'}}, of that pattern is already on the number watchlist. You can use !!/bisect-number +91-8179496603 to determine which entries on the number lists match that pattern, which would tell you: Matched by the following: +91 8179496603 on line 3190 of watched_numbers.txt: 918179496603 found normalized 8179496603(?#NO NorAm) on line 3213 of watched_numbers.txt: 8179496603 found verbatim
!!/watch-number +91-6309565721
07:07
@CodyGray A normalized version, {{'916309565721'}}, of that pattern is already on the number watchlist. You can use !!/bisect-number +91-6309565721 to determine which entries on the number lists match that pattern, which would tell you: Matched by the following: +91 6309565721 on line 3191 of watched_numbers.txt: 916309565721 found normalized 6309565721(?#NO NorAm) on line 3212 of watched_numbers.txt: 6309565721 found verbatim
Well alrighty then.
[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): which lean six sigma certification is most recognized?‭ by SANDEEP‭ on superuser.com
!!/watch Lean[\W_]*Six[\W_]*Sigma
07:07
!!/watch Six[\W_]*Sigma[\W_]*Black[\W_]*Belt
The problem is, if the number is included as "8712186898", it doesn't match the items on the watchlist...
!!/watch-number 8712186898(?#NO NorAm)(?# watched as +91-8712186898, but used in posts in shortened form)
@SmokeDetector IP address adjacent to websolutionstuff.com but perhaps not sufficient to posit a relationship
!!/watch (?-i:^tobylykins$)
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in title, blacklisted website in body, link at beginning of body, potentially bad asn for hostname in body, +2 more (334): Digital Marketing Institute In Bangalore‭ by soufashion 17‭ on stackoverflow.com
07:19
[ SmokeDetector ] GitHub Actions: success on acead34 by tripleee in the master branch
[ SmokeDetector ] GitHub Actions: success on c3e573d by tripleee in the master branch
!!/pull
[ SmokeDetector | MS ] Bad ip for hostname in body, bad keyword in body, bad keyword in link text in body, blacklisted website in body, potentially bad keyword in body (362): How can I learn medical data science?‭ by Amit A‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Prevent Spam Account Registration‭ by Garry Whichello‭ on magento.SE
[ SmokeDetector | MS ] Blacklisted website in answer, link at beginning of answer, potentially bad asn for hostname in answer, potentially bad ip for hostname in answer, +2 more (203): I tried to install Kubuntu 22.10 from a USB on b550 and Creative AE-7 sound card but Kubuntu didn't start‭ by Appliance Repair‭ on askubuntu.com
[ SmokeDetector | MS ] Blacklisted website in body, link at beginning of body, potentially bad asn for hostname in body, potentially bad ip for hostname in body, potentially bad ns for domain in body, +1 more (213): Home appliance repair services?‭ by Appliance Repair‭ on askubuntu.com
tpu- feedback received on [MS] Home appliance repair services?‭
!!/blacklist-username (?-i:^Appliance Repair$)
[ SmokeDetector ] GitHub Actions: success on f57d826 by tripleee in the master branch
07:45
!!/pull
[ SmokeDetector ] Blacklists reloaded at rev f57d8269d5 (tripleee: Blacklist IP 217.21.77.35) (running on teward/Thoth)
[ SmokeDetector | MS ] Bad ns for domain in answer, blacklisted website in answer, potentially bad keyword in answer (175): How to send OCO order to binance‭ by kevin hines‭ on stackoverflow.com
!!/bisect obsidian.md
@CodyGray Matched by obsidian\.md on line 21159 of watched_keywords.txt
But why?!! 0 TPs, 1 NAA, 20 FPs...
!!/unwatch obsidian\.md
!!/watch yugongengineering\.com
[ SmokeDetector | MS ] Link at end of body, potentially bad keyword in body (99): How many Twitch followers subscribe?‭ by Vance Hook‭ on superuser.com
@SmokeDetector tpu- Abusive copy-pasta repost of mod-deleted ChatGPT-generated content.
08:05
teward/Thoth: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 9efda08cc0 (SmokeDetector: Auto watch of yugongengineering\.com by Cody Gray) (running on teward/Thoth, Python 3.10.6)
Restart: API quota is 76414.
[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad ns for domain in answer (95): Why should I take the online QA courses?‭ by Taranveer Singh‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): Can I use always on VPN device tunnel on Windows 10 Pro ✏️‭ by cquresphere‭ on serverfault.com
[ SmokeDetector | MS ] Mostly punctuation marks in title (37): Matplotlib.pyplot.plot(x[y==1,-2], x[y==1,-1]) ✏️‭ by ERRRin‭ on stackoverflow.com
[ SmokeDetector | MS ] Link at beginning of answer, potentially bad keyword in answer (36): How to interrupt/abort a 3rd party synchronous script using JavaScript‭ by erp‭ on stackoverflow.com
!!/report stackoverflow.com/q/75066938 "spam speed; another user posted a spam answer to it."
[ SmokeDetector | MS ] Manually reported question (93): Why should I take the online QA courses?‭ by Akash Nagar‭ on stackoverflow.com
08:14
[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): Value must be entered in Conditional Cell ✏️‭ by Aydın B.‭ on stackoverflow.com
@SmokeDetector tpu-
@SmokeDetector tpu-
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in link text in body, bad keyword in title, potentially bad keyword in body (263): Buy Viagra Online In The USA: Get Overnight Delivery Without RX‭ by usapharmacyworld‭ on askubuntu.com
!!/watch usapharmacyworld(?!\.com)
@SmokeDetector coinsclone.com IP address changed from 149.28.201.191
zabtechnologies.net remains on the old IP
[ SmokeDetector | MS ] Pattern-matching website in answer (76): Managing JSON Array format in MQL4 script‭ by user20972358‭ on stackoverflow.com
[ SmokeDetector ] GitHub Actions: success on 8ab988c by tripleee in the master branch
CI on 8ab988c succeeded.
08:48
@CodyGray @Machavity FYI - this was matched for you back in July 2020
Yeah, the one and only NAA was the post Machavity reviewed. He thought the URL was suspicious (I forget the exact wording). I left a comment there.
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in link text in body, bad keyword in title, blacklisted website in body, pattern-matching website in body, +2 more (457): Day night hire High Profile Call Girls Navi Mumbai very good-looking model‭ by celebritymumbai‭ on math.SE
!!/watch celebritymumbai
!!/watch escortbook\.com
[ SmokeDetector ] GitHub Actions: success on 8f28ae3 by tripleee in the master branch
!!/watch simrankumari
[ SmokeDetector | MS ] Potentially bad ip for hostname in title (1): mongoose date query working in postman but not in cyclic.sh server‭ by Saurabh Gupta‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer, potentially bad ns for domain in answer (2): What IC is this? SMD marked AARY‭ by steve kwok‭ on electronics.SE
[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer (97): Microsoft Office Packages‭ by Aleks Gjoni‭ on superuser.com
fp feedback received on [MS] What IC is this? SMD marked AARY‭
tpu- feedback received on [MS] Microsoft Office Packages‭
!!/watch (?-i:MO30KEY)
[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer (97): Disable Windows 10 Shortcuts (Windows key remapped as Meta Key)‭ by Mohon Mondol‭ on stackoverflow.com
Makyen/MS-Relay: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev 6b79b1731 (Makyen: Ping Makyen for some new metasmoke users) (running on Makyen/MS-Relay, Python 3.11.0)
09:20
CI on d757950 succeeded.
[ SmokeDetector ] GitHub Actions: success on 249a285 by tripleee in the master branch
[ SmokeDetector ] GitHub Actions: success on d757950 by tripleee in the master branch
CI on 0c111cc succeeded.
CI on 249a285 succeeded.
[ SmokeDetector ] GitHub Actions: success on 0c111cc by tripleee in the master branch
CI on 0bfe170 succeeded.
[ SmokeDetector ] GitHub Actions: success on 0bfe170 by tripleee in the master branch
09:23
CI on c78373d succeeded.
!!/watch thinkific\.com
[ SmokeDetector ] GitHub Actions: success on c78373d by tripleee in the master branch
[ SmokeDetector ] GitHub Actions: success on 7d8fb33 by tripleee in the master branch
09:27
!!/watch drifthunters2\.io
@SmokeDetector edited copy of a snippet from the question with a spam link added
[ SmokeDetector ] GitHub Actions: success on 6ce738b by tripleee in the master branch
[ SmokeDetector | MS ] Bad ip for hostname in body, potentially bad keyword in body (100): how to use free job alert for freshers in 2023?‭ by rohit kumar‭ on stackoverflow.com
CI on 5f38f02 succeeded.
[ SmokeDetector ] GitHub Actions: success on 5f38f02 by tripleee in the master branch
09:39
[ SmokeDetector | MS ] Potentially problematic ns configuration in body (1): List to map with key as string and value as list. Whatever the order the list has that shpuld be preserved‭ by Sai‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body (2): WS2811 MOSFET driver - components help‭ by AleMonti‭ on electronics.SE
[ SmokeDetector | MS ] Offensive answer detected, potentially bad keyword in answer, toxic answer detected (159): Determining whether three points in s pace lie in the same plane‭ by Akagi-chan‭ on math.SE
09:58
[ SmokeDetector | MS ] Blacklisted website in answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer, potentially bad keyword in username, +1 more (168): Install Office 365 E1 on office 2019‭ by Microprokey‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): What distortions are present in this audio file?‭ by Jin Kazama‭ on sound.SE
!!/blacklist-keyword (?-i:MO30KEY)
10:05
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): How long does it take to insert 150000 items in list Using CSOM?‭ by sai teja‭ on sharepoint.SE
!!/watch-number +84 94 767 1524
@CodyGray A normalized version, {{'84947671524'}}, of that pattern is already on the number watchlist. You can use !!/bisect-number +84 94 767 1524 to determine which entries on the number lists match that pattern, which would tell you: Matched by +84 94 767 1524 on line 3374 of watched_numbers.txt: +84 94 767 1524 found verbatim
!!/watch Jeffsilbert39(?:@gmail\.com)?
@CodyGray That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
10:11
!!/watch Jeff[\W_]*Silbert(?!39)
[ SmokeDetector | MS ] Potentially bad keyword in body (1): getting undefined value on ejs‭ by Muhammad Abieb Basnuril‭ on stackoverflow.com
fp- feedback received on [MS] getting undefined value on ejs‭
!!/blacklist-number +84 94 767 1524
[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially bad asn for hostname in title (2): node-gyp: "..\src\binding.cc: no such file or directory" ✏️‭ by LoC‭ on stackoverflow.com
10:23
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Get verified answer only‭ by dev.skas‭ on stackapps.com
fp- feedback received on [MS] Get verified answer only‭
[ SmokeDetector | MS ] Link at beginning of body (41): In HTML my link for the nav does not work ✏️‭ by UnderTheLKW‭ on stackoverflow.com
10:34
@SmokeDetector Still alive [MS]
[ SmokeDetector | MS ] Manually reported answer (94): Allow alphanumeric, punctuation, and spaces‭ by barbara Graham‭ on stackoverflow.com
10:49
[ SmokeDetector | MS ] Potentially bad keyword in body (1): How to add custom fields on the basic prestashop contactform PRESTASHOP 1.7.8‭ by Diadh‭ on stackoverflow.com
00:00 - 11:0011:00 - 00:00

« first day (3341 days earlier)      last day (777 days later) »