« first day (3934 days earlier)      last day (105 days later) » 

16:05
[ SmokeDetector | MS ] Link at beginning of body, potentially bad asn for hostname in body, potentially bad keyword in body (48): gopalaomyogaschool,‭ by Rupa Singh‭ on academia.SE
[ SmokeDetector | MS ] Link at beginning of answer, potentially bad keyword in answer (39): Customer data organisation tool ✏️‭ by Lili Lin‭ on softwarerecs.SE
[ SmokeDetector | MS ] Potentially bad keyword in title (1): How can I complain against MobiKwik?‭ by radha Yadav‭ on superuser.com
tpu- feedback received on [MS] gopalaomyogaschool,‭
!!/watch gopalaomyogaschool\.com
@SmokeDetector They have 3 answers like that on the site and all 3 are disclosed, but it's the only content they have.
16:18
@SmokeDetector rude
[ SmokeDetector | MS ] Potentially bad keyword in body (1): NTFS large binary file recovery ✏️‭ by behrad‭ on unix.SE
Cow
Cow
sdc blacklist-number 0845-9271-989
@Cow You don't have blacklist manager privileges, but I've created PR#12874 for you.
16:26
fp- feedback received on [MS] NTFS large binary file recovery‭
@Cow That doesn't load for me.
!!/approve 12874
16:32
[ SmokeDetector | MS ] Few unique characters in answer, no whitespace in answer, repeating characters in answer (263): Как разместить input по центру‭ by Ярослав Акимов‭ on ru.stackoverflow.com
[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): How can I complain against MobiKwik?‭ by Sorry Good‭ on meta.SE
I expect the amount of fp from 'Chinese character in title' to rise, some of them tagged journey-to-the-west. A new game dropped recently, Black Myth: Wukong. It's based on that novel and apparently it has taken the international gaming world by storm.
Cow
Cow
sdc blacklist-number 0743-91+21-890
16:35
@Cow You don't have blacklist manager privileges, but I've created PR#12875 for you.
Cow
Cow
@Mast pretty insane over 3 million online yesterday
!!/approve 12875
!!/watch-number- 0743-91+21-890
@Anerdw A normalized version, {{'07439121890'}}, of that pattern is already on the number blacklist. You can use !!/bisect-number 0743-91+21-890 to determine which entries on the number lists match that pattern, which would tell you: Matched by 0743-91+21-890 on line 1775 of blacklisted_numbers.txt: 0743-91+21-890 found verbatim
16:37
is the number watchlist double-bookended?
[ SmokeDetector | MS ] Bad phone number in body, potentially bad keyword in username (101): How can I complain to Byju's?‭ by spammer‭ on meta.SE
tpu- feedback received on [MS] How can I complain to Byju's?‭
[ SmokeDetector | MS ] Bad phone number in answer, potentially bad keyword in username, blacklisted user (173): How can I complain to Byju's?‭ by spammer‭ on meta.SE
tpu- feedback received on [MS] How can I complain to Byju's?‭
!!/blacklist-number 0845-927-1989
16:37
@Mast A normalized version, {{'08459271989'}}, of that pattern is already on the number blacklist. You can use !!/bisect-number 0845-927-1989 to determine which entries on the number lists match that pattern, which would tell you: Matched by 0845-9271-989 on line 1774 of blacklisted_numbers.txt: 08459271989 found normalized
D'oh, ofcourse that normalizes as the same number.
Cow
Cow
I'm thinking about calling of those numbers just to see if it's real
@Anerdw The number lists have a lot of magic going on behind the screens, so the entries themselves are posted 'as seen'.
@Cow Probably get a scammer on the line.
Cow
Cow
at least it's real then
This campaign is organized crime.
Cow
Cow
16:40
definitely organized
@Mast I see. Not sure how it missed this one though... metasmoke.erwaysoftware.com/post/494390
@Anerdw Bookending in the sense that we use it for keywords isn't really the same concept for the numbers watchlist and blacklist. The numbers lists don't used regular expressions. The "breaks" are between sequences of consecutive number digits or, when looking for obfuscated numbers, sequences of characters which are either number digits or which translate to number digits. So, in a sense, yes, there's bookending, in that it won't detect the start or end of a number that's within a sequence of consecutive digits.
@Anerdw It didn't exist yet.
7 mins ago, by Cow
sdc blacklist-number 0743-91+21-890
That's why.
oh heh. feeling kinda silly rn.
Nothing to do with bookending :-)
Cow
Cow
16:43
:)
[ SmokeDetector | MS ] Potentially bad keyword in body, potentially bad keyword in title (2): "><script src=ketanindori.bxss.in></script> let see‭ by Ketan Indori‭ on askubuntu.com
Cow
Cow
@Makyen let me know if you want me to edit the PR again and take out the bookmarklet section. I could move it to the wiki if that is what you want, i'll just need a link
tpu- feedback received on [MS] "><script src=ketanindori.bxss.in></script>; let see‭
[ SmokeDetector | MS ] Potentially bad keyword in answer (1): when I was trying to import yolo from ultralytics ✏️‭ by Ray‭ on stackoverflow.com
16:46
@metasmoke People are editing GenAI posts now.
17:04
!!/blacklist-keyword ^how[\W_]*+can[\W_]*+i[\W_]*+complain[\W_]*+(?:to|against|on)\W*+(?!someone\b|my\b)
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Multi-Step forms as classic multiple choice form or chatbot?‭ by Lars‭ on ux.SE
[ SmokeDetector | MS ] Link at end of answer, linked punctuation in answer (141): How can I disable the mouse click on the button action event?‭ by IRank‭ on stackoverflow.com
Cow
Cow
sdc watch- vnromfrp\.app
17:12
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Help Identify SMD IC Component‭ by user3911539‭ on electronics.SE
fp- feedback received on [MS] Help Identify SMD IC Component‭
[ SmokeDetector | MS ] Non-latin link in answer, potentially bad asn for hostname in answer (76): How good was Rabindranath Tagore's English, in general?‭ by Prosanta‭ on literature.SE
Cow
Cow
@SmokeDetector f
17:38
[ SmokeDetector | MS ] Linked punctuation in answer, potentially bad ip for hostname in answer, blacklisted user (151): Soundcloud private track download from api link?‭ by IRank‭ on stackoverflow.com
!!/watch ssoidraj\.com
certificate warnings? bluh i hate internet
!!/ms-status
@ThomasWard metasmoke is up. Current failure count: 0 (Makyen/EC2-linux)
API quota rolled over with 92178 requests remaining. Current quota: 99999.
stackoverflow: 6333
math: 2818
physics: 741
superuser: 688
ru.stackoverflow: 586
electronics: 569
askubuntu: 518
mathoverflow.net: 447
unix: 404
tex: 397
diy: 326
stats: 323
gis: 304
ell: 274
mathematica: 248
blender: 236
es.stackoverflow: 235
philosophy: 219
salesforce: 204
scifi: 204
serverfault: 197
judaism: 191
hermeneutics: 188
worldbuilding: 178
apple: 153
cs: 151
dba: 149
puzzling: 138
english: 138
pt.stackoverflow: 137
christianity: 134
buddhism: 127
ethereum: 122
travel: 119
magento: 110
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector | MS ] Potentially bad asn for hostname in body (1): Rewriting URLs using .htaccess in cloudflare pages (can it be done with headers?) ✏️‭ by Amaan Kazi‭ on stackoverflow.com
[ SmokeDetector ] SmokeDetector started at rev 839550c612 (SmokeDetector: Auto watch of ssoidraj\.com by Spevacus) (running on Makyen/EC2-linux, Python 3.11.3)
Restart: API quota is 99943.
Cow
Cow
17:57
@SmokeDetector f
teward/Cerberus: Executing automatic scheduled reboot.
18:09
Warning: teward/Cerberus: Last 11 connection(s) to metasmoke failed. Setting metasmoke status to down.
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Integrating Strapi with existing backend and database‭ by weaver‭ on stackoverflow.com
18:24
[ SmokeDetector | MS ] Potentially bad ip for hostname in body, potentially bad ns for domain in body, potentially bad keyword in body (3): Free online web services to dramatically enhance the quality of very old video clips?‭ by Irfan Surdar‭ on video.SE
@ThomasWard Just FYI: My instance has a hosts file entry for MS, so it won't show the effects of the DNS problems.
@Makyen yeah i know
i'm looking into solutions now
and i'm not liking what i'm seeing
@ThomasWard np. I just wanted to make sure that it wasn't presenting confusing information.
@ThomasWard Thanks for taking a look into it. I'm sorry to hear that it's non-trivial.
@ThomasWard Server dead and dying?
18:27
@Mast no, but some weird ass networking problem
I thought it was only a DNS problem.
How can that happen all of a sudden?
@Mast why do you think its maintenance time :p
Looks like it's affecting autoflagging too - higher number of failures than normal due to failed TCP connections.
Cow
Cow
@ThomasWard network broken?
18:36
In addition, I'm having some issues flagging via MS (eg. FIRE)
Cow
Cow
sorry
@Fastnlight i'd expect that if there's DNS problems. The problem is the system is somehow not responding to DNS requests even though it's receivving the packets
and there's no logical reason for this
SO
...do I poke the bear?
i'm going to just move the DNS server. Again.
@ArtOfCode holds the deadly "DELETE EVERYTHING" button
oh FFS right NOW there's an ISP blip on my end?
mod abuse!!!1!1!!!11
18:39
the world hates me >.>
This one?
@Fastnlight ye that's one of them
there's another one over there next to a cylindrical object
[ SmokeDetector | MS ] Link at beginning of body, potentially bad keyword in body (47): Casibom Giriş - Casibom Resmi‭ by tamera‭ on stackoverflow.com
wow okay i'm a numbskull
looks like the IP address on the container holding the DNS changed. And when it changed BIND9 failed to bind to the IP because it was different.
RIP
Notice: teward/Cerberus: Last 2 connection(s) to metasmoke succeeded. Setting metasmoke status to up.
there we go
@ThomasWard These DNS issues should now be resolved.
5
Cow
Cow
19:08
sdc location
Cow
Cow
standby Makyen?
sdc watch- casibom72o\.com
PR#12877 ("Cow: Watch casibom72o\.com") opened by SmokeDetector
Cow
Cow
sdc watch- casibom
19:26
Opinion please: this post (appreciating that it's 5 months old...) - 3 fp, 3 tp. Argument for FP seems to be that the post itself is reasonable; on the other hand it seems to be plagiarised. I'm not sure I'd red-flag for plagiarism, though.
Plagiarism/AIGC gets a tp, but only if SD finds that post itself. We won't actually report Plagiarism/AIGC to SD if they aren't caught naturally.
However, you are correct in that you wouldn't red flag that post
For the post you linked, I would say tp + mod flag (as there is no plagiarism flag on that site)
!!/unwatch- xo3d(?!\.co\.uk)
[ SmokeDetector | MS ] Bad ip for hostname in body, bad ns for domain in body, bad keyword in link text in body, link at beginning of body, potentially bad keyword in body (314): Buy Walmart Seller Account‭ by Buy Walmart Seller Account‭ on stackoverflow.com
[ SmokeDetector | MS ] Bad keyword in body, potentially bad asn for hostname in body (95): Professional Home Painting‭ by sunshinehomepaints‭ on stackoverflow.com
19:33
tpu- feedback received on [MS] Buy Walmart Seller Account‭
tpu- feedback received on [MS] Professional Home Painting‭
!!/watch- sunshinehomepaintingservice\.com
PR#12880 ("Fastnlight: Watch sunshinehomepaintingservice\.com") opened by SmokeDetector
!!/blacklist-number +1 (531) 309–0897
!!/approve 12880
Cow
Cow
19:53
sdc location
Cow
Cow
sdc status
@Cow Running since 17:56:15 UTC (1 hour, 58 minutes, 25 seconds)
[ SmokeDetector | MS ] Offensive answer detected, toxic answer detected (159): No ConcurrentList<T> in .Net 4.0?‭ by srf‭ on stackoverflow.com
Cow
Cow
@ArtOfCode you doing testing ? :D i.sstatic.net/4aBacSQL.png
19:56
please disregard the spam while I remove years of dust from my knowledge of how to run Smokey
Cow
Cow
haha
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Best Crypto Bonus Offers And Promotions In August 2024?‭ by TUsharali‭ on stackoverflow.com
!!/watch- chalisa-pdf\.com
PR#12881 ("Fastnlight: Watch chalisa-pdf\.com") opened by SmokeDetector
20:40
[ SmokeDetector | MS ] Bad ip for hostname in body, bad ns for domain in body, potentially bad asn for hostname in body (195): Will the SEO ranking be impacted if the website's page speed is low?‭ by vasi Vass‭ on stackoverflow.com
!!/approve 12881
Does this smell spammy to y'all? literature.stackexchange.com/a/27682/58
[ SmokeDetector | MS ] Body starts with title and ends in url, potentially bad asn for hostname in body, potentially bad keyword in body (98): personal watercraft WAVERUNNER‭ by Jetski Moto familys‭ on stackoverflow.com
@Mithical sniff sniff yes
20:47
tpu- feedback received on [MS] personal watercraft WAVERUNNER‭
[ SmokeDetector | MS ] Non-latin link in answer, potentially bad asn for hostname in answer (76): How good was Rabindranath Tagore's English, in general?‭ by Prosanta‭ on literature.SE
!!/notify- 11540 literature.stackexchange.com
21:00
@Mithical No such command 'notify-11540'.
!!/watch jetskimoto\.com
@SmokeDetector tpu-
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Django Session Data Not Persisting Across Requests After Login‭ by Nilay Sangani‭ on stackoverflow.com
[ SmokeDetector | MS ] Potentially bad ns for domain in body (1): Calculating roll angle from orientation vectors‭ by Jordan Carroll‭ on math.SE
21:12
[ SmokeDetector | MS ] Link at end of answer, potentially bad keyword in answer (64): How to find the nearest location which has sunny forecast‭ by Luxury Poeples‭ on travel.SE
!!/watch-force subwaysurferapk\.org
@Vickel That pattern looks like it's already caught by Potentially bad keyword in answer and Potentially bad keyword in body Append -force to the command word(s) if you really want to add the pattern you provided.
@Vickel You don't have blacklist manager privileges, but I've created PR#12882 for you.
PR#12882 ("Vickel: Watch subwaysurferapk\.org") opened by SmokeDetector
21:16
!!/bisect subwaysurferapk.org
@NisseEngström Matched by [a-z0-9%-]*apk[a-z0-9%-]*+\.(?:[a-z0-9%-]++\.)*[a-z0-9%]{2,4}+\b(?<!\.(?:png|jpg|gif|svg)\b)(?<!\.(?:gz|sh)\b)(?<!\.(?:bat|git|jar|tar|txt|yml|zip)\b)(?<!\.(?:file|java)\b)(?<!\bwapka\.me\b)(?<!\bapkeh\.com\b)(?<!\btapkey\.io\b)(?<!\bapktom\.com\b)(?<!\bmapkit\.map\b)(?<!\bapkhigh\.com\b)(?<!\bapkcombo\.com\b)(?<!\bfreemodedapk\.com\b)(?<!\bmultiapkclub\.com\b)(?<!\bconfigure-apk-splits\.html\b)(?<!\bapkmirror\.com\b) on line 38269 of watched_keywords.txt
[ SmokeDetector | MS ] Potentially bad keyword in body, blacklisted user (73): How can I efficiently handle large datasets in a Python updated?‭ by Luxury Poeples‭ on travel.SE
!!/approve 12882
@NisseEngström I'm following this guideline: chat.stackexchange.com/transcript/message/62154309
21:23
@Vickel Thanks.
[ SmokeDetector | MS ] Potentially bad keyword in body (1): Can’t install: sudo pip3 install rpi_ws281x‭ by adam r‭ on stackoverflow.com
!!/watch thesuperions\.com
@Vickel You don't have blacklist manager privileges, but I've created PR#12883 for you.
PR#12883 ("Vickel: Watch thesuperions\.com") opened by SmokeDetector
!!/watch nifportugal\.net
21:29
@Vickel You don't have blacklist manager privileges, but I've created PR#12884 for you.
PR#12884 ("Vickel: Watch nifportugal\.net") opened by SmokeDetector
!!/watch enifportugal\.com
@Vickel You don't have blacklist manager privileges, but I've created PR#12885 for you.
PR#12885 ("Vickel: Watch enifportugal\.com") opened by SmokeDetector
!!/watch-force clashofclansapk\.org
21:31
@Vickel You don't have blacklist manager privileges, but I've created PR#12886 for you.
PR#12886 ("Vickel: Watch clashofclansapk\.org") opened by SmokeDetector
Makyen/MS-Relay: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev ee0f84fecd (Makyen: Log as debug MS WebSocket messages) (running on Makyen/MS-Relay, Python 3.11.3)
!!/watch burstfade\.org
@Vickel You don't have blacklist manager privileges, but I've created PR#12887 for you.
PR#12887 ("Vickel: Watch burstfade\.org") opened by SmokeDetector
^ end of honeypot
21:35
!!/approve 12883
!!/approve 12884
!!/approve 12885
!!/approve 12886
!!/approve 12887
@NisseEngström Post 1: Already recently reported [ MS ]
[ SmokeDetector | MS ] Potentially bad keyword in body, blacklisted user (73): How can I efficiently handle large datasets in a Python updated? ✏️‭ by Luxury Poeples‭ on travel.SE
!!/approve 12876
!!/approve 12877
@NisseEngström would have saved me some time, didn't remember that you can report-force :) thanks
22:20
[ SmokeDetector | MS ] Potentially bad keyword in username (1): virtual environment‭ by Fulani‭ on ru.stackoverflow.com
fp feedback received on [MS] virtual environment‭
23:01
[ SmokeDetector | MS ] Potentially bad keyword in body (1): index.php file keeps redirecting to a non-existent index.html file?‭ by 0jd9‭ on wordpress.SE
23:29
[ SmokeDetector | MS ] Bad ip for hostname in answer, bad ns for domain in answer, bad keyword in answer, bad keyword with email in answer, messaging number in answer, +2 more (451): Lost Coins on Uniswap‭ by Amber Lucy‭ on ethereum.SE
tpu- feedback received on [MS] Lost Coins on Uniswap‭
23:42
@SmokeDetector Please revert the latest edit.
[ SmokeDetector | MS ] Bad keyword in body, bad phone number in body, potentially bad keyword in body, potentially bad keyword in username (196): How to complain PhonePe online?‭ by spammer‭ on codegolf.meta.SE
tpu- feedback received on [MS] How to complain PhonePe online?‭
[ SmokeDetector | MS ] Bad keyword in answer, bad phone number in answer, potentially bad keyword in answer, potentially bad keyword in username, blacklisted user (263): How to complain PhonePe online?‭ by spammer‭ on codegolf.meta.SE
23:46
tpu- feedback received on [MS] How to complain PhonePe online?‭
!!/reject 12879 "this is a duplicate of 12878"
@JeffSchaller Please provide an adequate reason for rejection (at least 20 characters long) so the user can learn from their mistakes. Use -force to force the reject
@JeffSchaller Closed pull request #12879.
Makyen/EC2-linux: Executing automatic scheduled reboot.
[ SmokeDetector ] SmokeDetector started at rev a2238fba46 (SmokeDetector: Merge pull request #12877 from Charcoal-SE/auto-blacklist-1724612950) (running on Makyen/EC2-linux, Python 3.11.3)
Restart: API quota is 97740.
teward/Cerberus: Executing automatic scheduled reboot.

« first day (3934 days earlier)      last day (105 days later) »