« first day (3847 days earlier)      last day (235 days later) » 

12:03
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Translation Url not reached‭ by a deleted user on elementaryos.SE
[ SmokeDetector | MS ] Bad keyword in answer, bad keyword in link text in answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer (172): Security of Mathematica Demonstrations‭ by Internal Security and Manpowe‭ on mathematica.SE
[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer, repeating characters in answer (263): ¿Cómo llegó "hostia" a significar "Golpe, trastazo, bofetada"?‭ by user36502‭ on spanish.SE
[ SmokeDetector ] SmokeDetector started at rev 8cf3aef903 (SmokeDetector: Auto watch of homestudiogenie\.com by Jeff Schaller) (running on teward/Cerberus, Python 3.10.12)
Restart: API quota is 90784.
[ SmokeDetector | MS ] Potentially bad keyword in answer, repeating characters in answer (78): ¿Cómo llegó "hostia" a significar "Golpe, trastazo, bofetada"?‭ by user36502‭ on spanish.SE
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector | MS ] Few unique characters in answer, repeating characters in answer (166): ¿Cómo llegó "hostia" a significar "Golpe, trastazo, bofetada"?‭ by user36502‭ on spanish.SE
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Test Container Initialize Mongo Db With Insert Document‭ by aasawari sahasrabuddhe‭ on stackoverflow.com
[ SmokeDetector | MS ] Bad ns for domain in answer (84): How to translate static slug in Django‭ by Kalyan s‭ on stackoverflow.com
!!/blacklist-website internalsecurity\.in
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): Including special characters in column names in BigQuery?‭ by sonal‭ on stackoverflow.com
@GeneralGrievance User blacklisted (25328577 on stackoverflow.com).
!!/test purduecart.com/
> Potentially bad ns for domain in body, potentially bad ns for domain in title
----------
Potentially bad ns for domain in body - purduecart.com NS suspicious ns1.bluehost.in.,ns2.bluehost.in.
Potentially bad ns for domain in title - purduecart.com NS suspicious ns1.bluehost.in.,ns2.bluehost.in.
!!/watch purduecart\.com
@GeneralGrievance You don't have blacklist manager privileges, but I've created PR#11366 for you.
12:37
PR#11366 ("General Grievance: Watch purduecart\.com") opened by SmokeDetector
@GeneralGrievance User blacklisted (22221814 on stackoverflow.com).
!!/test www.ryancreativeliving.com/interior-designs/
> Potentially bad asn for hostname in body, potentially bad asn for hostname in title
----------
Potentially bad asn for hostname in body - www.ryancreativeliving.com address 191.96.144.138 in ASN 47583
Potentially bad asn for hostname in title - www.ryancreativeliving.com address 191.96.144.138 in ASN 47583
12:38
!!/watch asetechnologies\.in
!!/watch ryancreativeliving\.com
@GeneralGrievance You don't have blacklist manager privileges, but I've created PR#11367 for you.
PR#11367 ("General Grievance: Watch ryancreativeliving\.com") opened by SmokeDetector
12:39
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad keyword in body (2): Enhance Your Driving Experience with Vehicle Sun Shades‭ by jeremy g‭ on mechanics.SE
[ SmokeDetector | MS ] Bad keyword in body, bad keyword in link text in body, potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body (170): Navigating Nursing FPX 4060 Assessment 3: A Roadmap to Success‭ by Arthurella‭ on mathoverflow.net
[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially bad keyword in body (2): which is the best rose parade tour packages providers in the USA‭ by Evelyn‭ on travel.SE
fp feedback received on [MS] Translation Url not reached‭
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Qemu booting stucked after I/OPTEE‭ by Alex Povarski‭ on stackoverflow.com
@tripleee Post 1: Already recently reported [ MS ]
12:44
@tripleee Post 1: Already recently reported [ MS ]
[ SmokeDetector | MS ] Bad keyword with email in answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer, blacklisted user (160): How best to lower LED garden light intensity‭ by Ryan Joseph‭ on electronics.SE
[ SmokeDetector | MS ] Bad ns for domain in body, potentially bad asn for hostname in body, potentially bad ip for hostname in body, potentially bad keyword in body, potentially bad keyword in title, +1 more (171): Why digital marketing is important for businesses?‭ by Prince Mishra‭ on stackoverflow.com
!!/blacklist-website deerdance\.com
12:49
!!/watch (?-i:^Ryan Joseph$)
multiple legitimate users, so not blacklisting
[ SmokeDetector ] GitHub Actions: success on 5f65cdf by tripleee in the master branch
[ SmokeDetector | MS ] Bad ns for domain in answer, potentially bad asn for hostname in answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer (87): What is the proper academic term for "realizing sales from online traffic"?‭ by SHUBHAM‭ on economics.SE
!!/blacklist-website ijset\.in
!!/watch digitalavnish\.in
@JeffSchaller That pattern looks like it's already caught by Potentially bad keyword in body and Potentially bad keyword in answer Append -force to the command word(s) if you really want to add the pattern you provided.
[ SmokeDetector ] GitHub Actions: success on 04a8541 by tripleee in the master branch
@doppelgreener Post 1: This does not look like spam
12:59
!!/blacklist-website faux-api\.com
!!/watch hutko\.dev
13:00
!!/watch hutko\.dev
oh i see
what about now then:
@doppelgreener That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
@doppelgreener Post 1: Already recently reported [ MS ]
@SmokeDetector k
these are all apparently part of a campaign metasmoke.erwaysoftware.com/…
!!/watch adaptsaplus\.com
@tripleee 32/0/1
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Bodhran Techniques‭ by Bridget Murphy‭ on music.SE
tp feedback received on [MS] Bodhran Techniques‭
13:06
There the 1 is disputed.
[ SmokeDetector | MS ] Potentially bad asn for hostname in body, potentially bad keyword in body, blacklisted user (74): Can I buy Microsoft Azure Users Contacts List?‭ by saqib‭ on stackoverflow.com
!!/watch lapostexaminer\.com
While we're talking about patterns, do perhaps the NAA need revisiting for this user? @tripleee
13:08
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): JSON reader was expecting a value but found 'Document‭ by aasawari sahasrabuddhe‭ on stackoverflow.com
That would incidentally turn your previous query to 32/0/0 if you do.
@Mast seems fair, thanks for noticing!
Cow
Cow
still active ms
13:11
Np
the really old one might not be part of this campaign but the last month or two looks like they are juggling a large number of domains, many of which share the same IP address too, and have recurring patterns in the spam messages
but I'm done for today, so just thinking out loud for the time being
@Cow Problem is those links go to OK places (Well, one of them hilariously 404's, but still.). It's the rest of the post that isn't legit.
[ SmokeDetector ] GitHub Actions: success on 6266ae3 by tripleee in the master branch
CI on 6266ae3 succeeded.
13:16
@GeneralGrievance User blacklisted (25330141 on stackoverflow.com).
!!/test www.xicom.biz/mobile-app-development-company-california.html
> Would not be caught as a post, title or username.
!!/watch xicom\.biz
@GeneralGrievance You don't have blacklist manager privileges, but I've created PR#11368 for you.
PR#11368 ("General Grievance: Watch xicom\.biz") opened by SmokeDetector
[ SmokeDetector | MS ] Manually reported question (92): TeleCMI and CallHippo pricing comparison‭ by user23648286‭ on meta.SE
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): Does anyone know a wordpress theme like this website?‭ by Abdul‭ on stackoverflow.com
[ SmokeDetector | MS ] Bad keyword with email in body, potentially bad keyword in body (59): Looking for a programmer to run a business and help me develop my idea‭ by Franc Riba Martí‭ on stackoverflow.com
13:38
@SmokeDetector tpu- Recruitment
!!/watch CallHippo
!!/notify- 11540 /autoflag_fp
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): How to book Spirit Airlines Group Flight‭ by Ronnie Crewe‭ on travel.SE
@SmokeDetector tpu-
[ SmokeDetector | MS ] Potentially bad keyword in username (1): Ubuntu 22.04 boot stops and freezes‭ by Yang Tianxi‭ on askubuntu.com
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Exchange 2019 On-Premise OWA/ECP/Autodiscover Issues‭ by JBMacer‭ on serverfault.com
13:57
@Dragonrage What was blacklisted was (?-i:^sonam singh$): 14 Total / 9 TP (64.29% TP) / 5 FP / 0 NAA. At this point, it should be removed, as it's definitely getting FP. Alternately, the two users which have been erroneously caught could have gotten fpu feedback, which would prevent their posts from being reported if only the username is detected. In this case, I don't see a good reason to have the name blacklisted or watched, as the posts which it was added for are detected by multiple different detections and are well above the default autoflagging threshold. Thanks for mentioning it.
!!/unblacklist (?-i:^sonam singh$)
@VLAZ Not being able to VtC on other sites when you don't have experience on the specific site is reasonable, IMO. It, generally, takes experience of the specific site in order to really know what's on-topic and off-topic for that site. Sure, there are questions which are obviously off-topic, but being able to VtC also allows you to directly affect topicality on the site for things that aren't obvious. Migrations are a good surrogate for what would happen if the VtC privilege transferred. A lot of migrations fail as a result of the migrated question being off-topic on the target site.
^ This
That doesn't mean that nothing should change. It just means that I don't think transferring the VtC privilege across sites is a good idea.
I'd have to start handing out suspensions like candy if everyone from the network could VTC on CR.
14:11
I think it'd make sense to make a decent number of helpful flags for closure translate to the privilege at some point. Similar to a good percentage of approved suggested edits = unilateral edit privs.
But transferring it across the network? Ehhhh. I could see an argument for the read-only privileges being network-wide, such as seeing deleted content and maybe site analytics, but
[ SmokeDetector | MS ] Bad keyword in body, bad keyword with email in body, bad phone number in body, blacklisted website in body, pattern-matching email in body, +1 more (427): HOW TO GET BACK STOLEN BITCOIN AND LOST CRYPTO INVESTMENT‭ by williams James‭ on gaming.SE
@Spevacus Like attaching closure votes privileges to the Marshal badge, as a secondary route? I see that as more likely than making it networkrep bound.
Still some details to work out before that would be a success, but I can see the basis of a valid approach there.
Maybe, but even just the Marshal badge isn't a good indicator, as it doesn't mean the flags were for closure. For example, I've gotten the Marshal badge, due to flagging spam and R/A, on sites where I really have no experience as to the site's topicality.
14:19
!!/watch- fastmarineboat\.com
!!/watch- spiritabooking\.com
!!/watch- telecmi
!!/watch- fribamarti(?:@gmail\.com)?
[ SmokeDetector ] Blacklists reloaded at rev 8e6e8b012d (SmokeDetector: Auto watch of telecmi by Makyen) (running on teward/Cerberus)
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How can light be stretched (redshifted) if the speed of light is constant?‭ by York Hutton‭ on physics.SE
[ SmokeDetector | MS ] Potentially bad asn for hostname in answer (1): How to copy files from my PC to another PC using CMD or a batch file‭ by Pacific Ocean‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): HB88 NHA CAI UY TIN NHAT A AU 2024‭ by hb88social‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Running Powershell script with Winforms from .bat file‭ by user24701836‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): How strong of a magnet is needed for magnet fishing for assorted metal objects?‭ by Sam‭ on outdoors.SE
[ SmokeDetector | MS ] Bad keyword in link text in answer, potentially bad keyword in answer (82): Unable to add a comment on my Django blog‭ by MaryN Gomez‭ on stackoverflow.com
14:37
tp feedback received on [MS] HB88 NHA CAI UY TIN NHAT A AU 2024‭
!!/watch hb88\.social
[ SmokeDetector | MS ] Link at beginning of body (45): Use DirectX 11 & HLSL in SDL‭ by M 027‭ on gamedev.SE
!!/watch- hb88(?:casino|social)?
!!/watch- nhacaihb88
@Makyen Correct, but it's a better start then networkrep.
It would have to be a combination of relevant flags, correct flags, not too many bad flags, etc...
Too complicated really to be a worthwhile endeavour at this point in time, but there are sensible routes if sufficient (relevant) people were so inclined.
14:57
[ SmokeDetector | MS ] Potentially bad ns for domain in answer (1): Diametrically magnetised ring magnet, opposite poles on the inside?‭ by Sam7878‭ on engineering.SE
@SmokeDetector tpu-
@GeneralGrievance Why? I can see NAA, but tpu is a bit harsh for a link that's relevant if there's no affiliation apparent.
[ SmokeDetector | MS ] Blacklisted user (72): Magnet and needle‭ by Sam‭ on physics.SE
!!/blacklist-website magnetstore\.co\.uk
Ah, pattern.
yeah, there are a few that could use some flags: stackexchange.com/search?q=url%3Amagnetstore.co.uk
Magnets... how do they work...
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): PuppeteerSharp ContentFrameAsync() возвращает null‭ by coldheart‭ on ru.stackoverflow.com
15:12
@Cow You may wish to reconsider your feedback on this post, given this pattern.
@SmokeDetector f I mean... What?
@Spevacus Sometimes the weirdest things are fp's. This one popped up yesterday: music.stackexchange.com/q/136212
@SmokeDetector naa-
15:19
@doppelgreener That report was a question; questions cannot be marked as NAAs.
@GeneralGrievance 🎵🎵🎵 ANAlysIS pLEase 🎵🎵🎵
I'm just glad I have downvote privs on that site.
[ SmokeDetector ] SmokeDetector started at rev cc027e0b0d (SmokeDetector: Auto blacklist of magnetstore\.co\.uk by Spevacus) (running on teward/Cerberus, Python 3.10.12)
Restart: API quota is 88387.
!!/bisect Skill slash
@Spevacus Matched by skill[\W_]*+slash(?!\.com(?<=skillslash\.com)) on line 2816 of bad_keywords.txt
15:22
@SmokeDetector fpu-
Hm... pre-chatgpt, huh...
All of these FP answers i'm going through look like an ancient LLM yeah
very weird
Well, GPT-3 itself has been around since 2020, so we can't rule it out entirely.
Oh, and Yunnosch is right too, I think. The post is pretty much junk, isn't it?
By fire be purged.
!!/watch- (?-i:eGnSX6jkN0U)
teward/Cerberus: SE WebSocket: recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost.
15:33
@SmokeDetector naa- "Honestly, this post is pretty much irrelevant to the question. I don't think it's a genuine attempt to answer."
@SmokeDetector naa-
Seems other users have made similar observations on other sites.
Yeah
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Is there a way to dynamically update og meta tags in angular‭ by Panawe‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, potentially bad keyword in answer (2): Is there any decentralized and secure alternative to QuickNode?‭ by Яна Уилльямс‭ on solana.SE
Cow
Cow
@Spevacus will do in a min
[ SmokeDetector ] SmokeDetector started at rev 72fe2a2aa4 (SmokeDetector: Auto watch of (?-i:eGnSX6jkN0U) by Makyen) (running on teward/Cerberus, Python 3.10.12)
Restart: API quota is 87735.
Cow
Cow
@Spevacus 1 month ago, no wonder I don't remember
Cow
Cow
@SmokeDetector I'm not buying this, unregistered user
Cow
Cow
sdc watch- betbrasil\.org
PR#11369 ("Cow: Watch betbrasil\.org") opened by SmokeDetector
Cow
Cow
betting site
@SmokeDetector I've seen this avatar used before on several other accounts
does it mean it's spam? dunno, but it does look suspicious
16:19
!!/approve 11369
[ SmokeDetector | MS ] Potentially bad keyword in body, repeating characters in body (56): the code doesn't work! Someone can I help me?‭ by Mauro Profili‭ on stackoverflow.com
16:21
@Cow I've been speculating from time to time that it might be a good idea to identify recurring avatars but it might be more work than it is reasonably worth
also the name is weird, it's Yana (Jane?) Williams transcribed in Cyrillics
Cow
Cow
the site is on the watch list also, so I'm going with spam
[ SmokeDetector ] SmokeDetector started at rev 4c5654bdab (SmokeDetector: Merge pull request #11369 from Charcoal-SE/auto-blacklist-1717085878) (running on teward/Cerberus, Python 3.10.12)
Restart: API quota is 87645.
16:29
CI on 8846299 succeeded.
[ SmokeDetector | MS ] Potentially bad ip for hostname in body (1): FOR loop is not working in my Django template ✏️‭ by Masud Ahmad‭ on stackoverflow.com
@SmokeDetector still up (MS)
@SmokeDetector still up (MS)
same question, two different answers
@tripleee I've been planning on it as a general capability of being able to watch/blacklist image contents. I've done some concept work, but haven't written code for it, yet.
I'd also like to find a free inappropriate image content API that we could use to run non-SE-hosted images through, but haven't identified one. Maybe SE will let us use the one they are using.
16:35
originally, there were three; the first was promptly deleted
[ SmokeDetector | MS ] Link at beginning of answer (37): JIRA - move one sub-task from one story to another‭ by dvblk‭ on stackoverflow.com
-1
Q: Procmail in Recipient doesn't contain string

ff-webdesignerI'm pretty good in regex...but can't solve this procmail problem. :0 * ^Subject:.*Derila.* /dev/null filters out everything that contains Derila in subject line. working. But how do i filter out - or even better: mark as spam in header - when the recipient DOESN't contain a certain string like m...

!!/watch nordicgear\.dk
!!/watch applegenbrug\.dk
[ SmokeDetector ] Blacklists reloaded at rev ceaf702d1b (SmokeDetector: Auto watch of nordicgear\.dk by Spevacus) (running on teward/Cerberus)
[ SmokeDetector | MS ] Potentially bad ns for domain in answer, blacklisted user (73): How can light be stretched (redshifted) if the speed of light is constant? ✏️‭ by York Hutton‭ on physics.SE
[ SmokeDetector | MS ] Potentially bad keyword in body (1): منصة دوراتك دورة الذكاء العاطفي duratak care‭ by duratak care‭ on stackoverflow.com
17:01
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Best Websites for Mandarin Tutors‭ by John‭ on chinese.SE
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): update 23 to 24 using live-usb iso?‭ by Dănuț Încrosnatu‭ on askubuntu.com
teward/Cerberus: SE WebSocket: recovered from websocket._exceptions.WebSocketConnectionClosedException: Connection to remote host was lost.
Makyen/MS-Relay: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev ee0f84fecd (Makyen: Log as debug MS WebSocket messages) (running on Makyen/MS-Relay, Python 3.11.3)
fp- feedback received on [MS] update 23 to 24 using live-usb iso?‭
fp- feedback received on [MS] Best Websites for Mandarin Tutors‭
17:29
[ SmokeDetector | MS ] Body starts with title and ends in url, link at beginning of body, potentially bad keyword in body, potentially bad keyword in title (143): Essentials Clothing Hoodie | Essentials Hoodie® | Limited Stock‭ by John S. Cadwallader‭ on stackoverflow.com
!!/watch essentialshoodiesite\.org
[ SmokeDetector | MS ] Manually reported answer (93): why I always get ACTION_DOWN from onTouchEvent‭ by Raymond‭ on stackoverflow.com
17:33
@SmokeDetector Link in profile
!!/watch rxwen\.blogspot
[ SmokeDetector | MS ] Blacklisted user (72): Native C/C++ code on an Android platform‭ by Raymond‭ on stackoverflow.com
[ SmokeDetector | MS ] Blacklisted user (72): 'Assert' statements in .NET production code‭ by Raymond‭ on stackoverflow.com
[ SmokeDetector | MS ] Blacklisted user (72): LongClick event also triggers Click event‭ by Raymond‭ on stackoverflow.com
17:36
Too many fp on site, actually
[ SmokeDetector | MS ] Blacklisted user (72): Android - Communications between a widget and its app‭ by Raymond‭ on stackoverflow.com
API quota rolled over with 86827 requests remaining. Current quota: 99999.
stackoverflow: 4891
math: 1497
physics: 412
electronics: 310
ru.stackoverflow: 301
mathoverflow.net: 281
superuser: 280
askubuntu: 274
tex: 236
gis: 189
stats: 182
unix: 176
blender: 146
serverfault: 124
diy: 123
es.stackoverflow: 121
english: 115
hermeneutics: 111
ell: 105
worldbuilding: 97
mathematica: 93
salesforce: 92
law: 89
dba: 85
magento: 73
solana: 73
philosophy: 72
scifi: 70
codegolf: 69
travel: 69
ethereum: 61
academia: 58
codereview: 57
softwareengineering: 57
quantumcomputing: 55
meta: 53
!!/unwatch rxwen\.blogspot
!!/report stackoverflow.com/a/68370664 "GItHub username matches website name in profile"
[ SmokeDetector | MS ] Bad keyword with email in body, pattern-matching email in body (134): FOR STOLEN OR HACKED CRYPTOCURRENCY FROM YOUR WALLET REACH OUT TO ROOTKIT HACKER‭ by Kayla Wood‭ on bitcoin.SE
@SmokeDetector tpu-
!!/watch rootkithacker1(?:@outlook\.com)?
17:49
Makyen/EC2-linux received failover signal. <-- This probably shouldn't have happened. Check if there are any operational notifications from Thomas Ward, which are usually pinned in the sidebar. If Thoth is operational (i.e. use the !!/location command to see if it responds), then consider executing !!/standby Makyen/EC2-linux to put this instance back in standby.
Restart: API quota is 99999.
> Potentially bad asn for hostname in body
----------
Potentially bad asn for hostname in body - www.reservationhelpdesks.com address 217.196.59.100 in ASN 47583
!!/location
!!/pull
[ SmokeDetector ] SmokeDetector started at rev 260accd9f3 (SmokeDetector: Auto unwatch of rxwen\.blogspot by Jeff Schaller) (running on Makyen/EC2-linux, Python 3.11.3)
Restart: API quota is 99990.
[ SmokeDetector | MS ] Link at end of answer, potentially bad ip for hostname in answer, potentially bad ns for domain in answer, potentially bad keyword in answer, potentially bad keyword in username, +1 more (139): Is it OK to turn off power to a fuel furnace?‭ by BOMCAS‭ on diy.SE
@Spevacus User is not blacklisted (25334461 on stackoverflow.com).
sdc watch- reservationhelpdesks\.com
@VLAZ with the watch above it from Discussion spam
@VLAZ User blacklisted (25334461 on stackoverflow.com).
@ThomasWard FYI in case you're not aware, the SD instance on Cerberus seems to have fallen over. Metasmoke appears to be operational. (cc @Makyen as FYI, as your instance is now the primary)
!!/watch rootkithacker1(?:@outlook\.com)?
17:59
@Vickel This didn't seem to go through, so I stole it. ^

« first day (3847 days earlier)      last day (235 days later) »