@VLAZ The theory, I suppose, would be that it's something we'd want blocked at a system level if possible. They also do frequently end up deleted by red flags, which is often how I find them.
They are also often unrelated to the question, and so arguably amount to posting garbage, same as, say, a complaint about how Bill Gates is a bad person or something on a Microsoft-related question.
That said...given that they appear to be paranoid delusions, it's unclear that the posting in random spots is intentional.
@SmokeDetector Earlier started with "This message is not a solution and will be deleted once the reader acknowledges it to avoid clutter." - a reminder to _no do that is likely in order here
@VLAZ yeah, I suspected it's related to the "Eastern conspiracy", probably even before "Guo Wengui" spam (MS Search). Thanks to Makyen's help, I started tracking them with the "conspiracy" tag on MS.
> Bad ip for hostname in body, bad ip for hostname in title, potentially bad asn for hostname in body, potentially bad asn for hostname in title, potentially problematic ns configuration in body, potentially problematic ns configuration in title ---------- Bad ip for hostname in body - drbhartipathlabs.com suspicious IP address 49.50.102.18 Bad ip for hostname in title - drbhartipathlabs.com suspicious IP address 49.50.102.18 Potentially bad asn for hostname in body - drbhartipathlabs.com address 49.50.102.18 in ASN 55470
@Dragonrage looks like the failed builds were due to a duplicate entry in the watchlist; I think I've straightened it out by unwatching and rewatching the entry. Cc @Makyen
here i go breaking things again. completely missed the PR when i originally watched it, then didnt remember i watched it when i saw the PR awhile later
@JeffSchaller yeah. glad it was an easy resolution. wonder how hard it would be to have MS check before closing a PR like it does when attempting to create one
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in link text in body, bad keyword in title, blacklisted website in body, pattern-matching product name in body, +2 more (554): Blue Vibe CBD Gummies Reviews by ChristinaStolz on meta.SE (@Ollie @PetəíŕdTheLinuxWizard @Ethan)
[ SmokeDetector | MS ] Bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer, potentially problematic ns configuration in answer (100): cross domain jquery get by alijoun poula on stackoverflow.com (@PetəíŕdTheLinuxWizard)
@Machavity doing some cleanup (archaeology expedition) and found this list of one user's spam where there's one conflicting feedback, on this MS post. Would you be willing to revisit that post? I'm keeping the spammed domain on the blacklist, so this is just to keep the numbers looking good.
@Makyen A normalized version, {{'971529296408'}}, of that pattern is already on the number watchlist and the pattern you provided is not an exact match to an existing entry on the number watchlist. You can use !!/bisect-number +971529296408 to determine which entries on the number lists match that pattern, which would tell you: Matched by 971529296408 on line 3695 of watched_numbers.txt: 971529296408 found normalized
@TylerH You are not a privileged user. Please see the privileges wiki page for information on what privileges are and what is expected of privileged users.
@SmokeDetector This user was blacklisted here at chat.stackexchange.com/transcript/11540?m=63195171 but the post was not blacklist-worthy (or really problematic at all, SD-wise). I apparently have to run rmblu here since they were blacklisted here, but I'm not privileged outside of SO. Can someone please remove this user from the blacklist here?
