Daily Usenet report

Jun 5 03:00:04 -- Jun 6 03:00:05

Unknown entries from news log file:

First 50 / 119 lines (42.0%)

Jun 5 03:01:23 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Jun 5 03:11:14 twilightnode nnrpd[1282357]: Reading access from /usr/local/news/etc/readers.conf
Jun 5 03:11:14 twilightnode nnrpd[1282357]: Auth strategy 'localhost' does not match client. Removing.
Jun 5 03:11:14 twilightnode nnrpd[1282357]: 77.155.45.199.censys-scanner.com res <anonymous>
Jun 5 03:11:14 twilightnode nnrpd[1282357]: 77.155.45.199.censys-scanner.com no_match_user <anonymous> <localhost>
Jun 5 03:11:14 twilightnode nnrpd[1282357]: 77.155.45.199.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 5 03:11:14 twilightnode nnrpd[1282357]: 77.155.45.199.censys-scanner.com match_user <anonymous> <anonymous>
Jun 5 03:11:14 twilightnode nnrpd[1282357]: 77.155.45.199.censys-scanner.com no_post anonymous-read
Jun 5 03:11:21 twilightnode nnrpd[1282358]: Reading access from /usr/local/news/etc/readers.conf
Jun 5 03:11:21 twilightnode nnrpd[1282358]: Auth strategy 'localhost' does not match client. Removing.
Jun 5 03:11:21 twilightnode nnrpd[1282358]: 77.155.45.199.censys-scanner.com res <anonymous>
Jun 5 03:11:21 twilightnode nnrpd[1282358]: 77.155.45.199.censys-scanner.com no_match_user <anonymous> <localhost>
Jun 5 03:11:21 twilightnode nnrpd[1282358]: 77.155.45.199.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 5 03:11:21 twilightnode nnrpd[1282358]: 77.155.45.199.censys-scanner.com match_user <anonymous> <anonymous>
Jun 5 03:11:21 twilightnode nnrpd[1282358]: 77.155.45.199.censys-scanner.com no_post anonymous-read
Jun 5 03:11:29 twilightnode nnrpd[1282359]: Reading access from /usr/local/news/etc/readers.conf
Jun 5 03:11:29 twilightnode nnrpd[1282359]: Auth strategy 'localhost' does not match client. Removing.
Jun 5 03:11:29 twilightnode nnrpd[1282359]: 77.155.45.199.censys-scanner.com res <anonymous>
Jun 5 03:11:29 twilightnode nnrpd[1282359]: 77.155.45.199.censys-scanner.com no_match_user <anonymous> <localhost>
Jun 5 03:11:29 twilightnode nnrpd[1282359]: 77.155.45.199.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 5 03:11:29 twilightnode nnrpd[1282359]: 77.155.45.199.censys-scanner.com match_user <anonymous> <anonymous>
Jun 5 03:11:29 twilightnode nnrpd[1282359]: 77.155.45.199.censys-scanner.com no_post anonymous-read
Jun 5 03:11:30 twilightnode nnrpd[1282359]: 77.155.45.199.censys-scanner.com res <anonymous>
Jun 5 03:11:30 twilightnode nnrpd[1282359]: 77.155.45.199.censys-scanner.com no_match_user <anonymous> <localhost>
Jun 5 03:11:30 twilightnode nnrpd[1282359]: 77.155.45.199.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 5 03:11:30 twilightnode nnrpd[1282359]: 77.155.45.199.censys-scanner.com match_user <anonymous> <anonymous>
Jun 5 03:11:30 twilightnode nnrpd[1282359]: 77.155.45.199.censys-scanner.com no_post anonymous-read
Jun 5 06:38:44 twilightnode nnrpd[1290634]: Reading access from /usr/local/news/etc/readers.conf
Jun 5 06:38:44 twilightnode nnrpd[1290634]: Auth strategy 'localhost' does not match client. Removing.
Jun 5 06:38:44 twilightnode nnrpd[1290634]: 45-56-79-53.ip.linodeusercontent.com res <anonymous>
Jun 5 06:38:44 twilightnode nnrpd[1290634]: 45-56-79-53.ip.linodeusercontent.com no_match_user <anonymous> <localhost>
Jun 5 06:38:44 twilightnode nnrpd[1290634]: 45-56-79-53.ip.linodeusercontent.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 5 06:38:44 twilightnode nnrpd[1290634]: 45-56-79-53.ip.linodeusercontent.com match_user <anonymous> <anonymous>
Jun 5 06:38:44 twilightnode nnrpd[1290634]: 45-56-79-53.ip.linodeusercontent.com no_post anonymous-read
Jun 5 07:39:39 twilightnode nnrpd[1293525]: Reading access from /usr/local/news/etc/readers.conf
Jun 5 07:39:39 twilightnode nnrpd[1293525]: Auth strategy 'localhost' does not match client. Removing.
Jun 5 07:39:39 twilightnode nnrpd[1293525]: 72-14-178-148.ip.linodeusercontent.com res <anonymous>
Jun 5 07:39:39 twilightnode nnrpd[1293525]: 72-14-178-148.ip.linodeusercontent.com no_match_user <anonymous> <localhost>
Jun 5 07:39:39 twilightnode nnrpd[1293525]: 72-14-178-148.ip.linodeusercontent.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 5 07:39:39 twilightnode nnrpd[1293525]: 72-14-178-148.ip.linodeusercontent.com match_user <anonymous> <anonymous>
Jun 5 07:39:39 twilightnode nnrpd[1293525]: 72-14-178-148.ip.linodeusercontent.com no_post anonymous-read
Jun 5 13:13:37 twilightnode nnrpd[1309291]: Reading access from /usr/local/news/etc/readers.conf
Jun 5 13:13:37 twilightnode nnrpd[1309291]: Auth strategy 'localhost' does not match client. Removing.
Jun 5 13:13:37 twilightnode nnrpd[1309291]: 93.152.208.38 res <anonymous>
Jun 5 13:13:37 twilightnode nnrpd[1309291]: 93.152.208.38 no_match_user <anonymous> <localhost>
Jun 5 13:13:37 twilightnode nnrpd[1309291]: 93.152.208.38 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 5 13:13:37 twilightnode nnrpd[1309291]: 93.152.208.38 match_user <anonymous> <anonymous>
Jun 5 13:13:37 twilightnode nnrpd[1309291]: 93.152.208.38 no_post anonymous-read
Jun 5 13:13:38 twilightnode nnrpd[1309292]: Reading access from /usr/local/news/etc/readers.conf
Jun 5 13:13:38 twilightnode nnrpd[1309292]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 5773 67.3%926.9 KB 71.0%
innfeed 1590 18.5%208.1 KB 15.9%
innd 995 11.6%145.5 KB 11.2%
nnrpd 202 2.4%21.4 KB 1.6%
controlchan 15 0.2%3.1 KB 0.2%
pgpverify 1 0.0%0.1 KB 0.0%
TOTAL: 6 8576 100.0%1.3 MB100.0%

History cache:

ReasonCount%Count
Negative hits 6298 35.3%
Positive hits 5800 32.5%
Do not exist 5707 32.0%
Cache misses 25 0.1%
TOTAL: 4 17830 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.004 0.0%1 4.000 4.000 4.000
article cleanup00:00:00.069 0.0%5721 0.000 0.012 0.091
article logging00:00:00.249 0.0%5756 0.000 0.043 0.158
article parse00:00:00.094 0.0%6988 0.000 0.013 0.129
article write00:00:03.583 0.0%4059 0.269 0.883 3.064
data move00:00:00.055 0.0%19244 0.000 0.003 0.030
hisgrep/artcncl00:00:00.001 0.0%1 1.000 1.000 1.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.199 0.0%17878 0.145 0.235 0.841
history sync00:00:00.052 0.0%415 0.000 0.125 1.000
history write00:00:03.043 0.0%5721 0.077 0.532 1.111
idle24:00:44.431100.0%19167 2167.899 4510.066 15020.975
nntp read00:00:00.503 0.0%18766 0.000 0.027 0.132
overview write00:00:01.922 0.0%4059 0.135 0.474 2.533
perl filter00:00:10.593 0.0%5721 1.135 1.852 9.105
python filter00:00:00.744 0.0%5721 0.000 0.130 0.789
site send00:00:00.130 0.0%4060 0.000 0.032 0.160
TOTAL: 1724:01:09.672100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.025 0.0%4078 0.000 0.006 0.071
article prepare00:00:00.001 0.0%24224 0.000 0.000 0.005
article read00:00:00.655 0.0%4075 0.000 0.161 0.875
backlog stats00:00:00.030 0.0%27015 0.000 0.001 0.014
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.179 0.0%14919 0.000 0.012 0.071
data write00:00:00.270 0.0%10913 0.000 0.025 0.095
idle23:59:54.028100.0%27015 1339.151 3198.002 7918.421
status file00:00:00.263 0.0%311 0.000 0.846 8.000
TOTAL: 923:59:55.451100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:25.748100.0%26 38.667 990.308 10391.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.000 0.0%135 0.000 0.000 0.000
TOTAL: 300:00:25.748100.0%----

Control commands to innd:

CommandNumber
flush 3
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 167

Control channel:

SendernewgrouprmgroupOtherBad PGPDoItOK
moderator@dana.de001101
TOTAL001101

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 5 11892 4081 6126 1685 34%50:58:34
2news.sklaffkom.se 44 110 46 47 17 41%11:48:34
3localhost 25 0 0 0 0 0%00:00:00
4news.chimia.se 1 0 0 0 0 0%00:10:00
TOTAL: 4 75 12002 4127 6173 1702 34%62:57:08
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net11.8 MB0.0 KB5.9 MB17.7 MB 66%3.1 KB
2news.sklaffkom.se157.6 KB0.0 KB37.5 KB195.2 KB 80%3.1 KB
3localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
4news.chimia.se0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 412.0 MB0.0 KB5.9 MB17.9 MB 66%3.1 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Jun 5 03:00:04 - 03:59:59 82 2.0% 0.02238.5 KB 2.0% 0.07
Jun 5 04:00:00 - 04:59:59 84 2.1% 0.02247.4 KB 2.1% 0.07
Jun 5 05:00:00 - 05:59:59 111 2.7% 0.03275.7 KB 2.3% 0.08
Jun 5 06:00:00 - 06:59:59 161 4.0% 0.04524.3 KB 4.3% 0.15
Jun 5 07:00:00 - 07:59:59 124 3.0% 0.03333.1 KB 2.8% 0.09
Jun 5 08:00:00 - 08:59:59 131 3.2% 0.04327.6 KB 2.7% 0.09
Jun 5 09:00:00 - 09:59:59 176 4.3% 0.05501.1 KB 4.2% 0.14
Jun 5 10:00:00 - 10:59:59 172 4.2% 0.05390.0 KB 3.2% 0.11
Jun 5 11:00:00 - 11:59:59 191 4.7% 0.05446.1 KB 3.7% 0.12
Jun 5 12:00:00 - 12:59:59 163 4.0% 0.05424.0 KB 3.5% 0.12
Jun 5 13:00:00 - 13:59:59 190 4.7% 0.05459.1 KB 3.8% 0.13
Jun 5 14:00:00 - 14:59:59 157 3.9% 0.04305.4 KB 2.5% 0.08
Jun 5 15:00:00 - 15:59:59 209 5.1% 0.06569.7 KB 4.7% 0.16
Jun 5 16:00:00 - 16:59:59 184 4.5% 0.05897.3 KB 7.4% 0.25
Jun 5 17:00:00 - 17:59:59 195 4.8% 0.05610.4 KB 5.1% 0.17
Jun 5 18:00:00 - 18:59:59 220 5.4% 0.06923.0 KB 7.6% 0.26
Jun 5 19:00:00 - 19:59:59 213 5.2% 0.06540.7 KB 4.5% 0.15
Jun 5 20:00:00 - 20:59:59 238 5.8% 0.07814.8 KB 6.8% 0.23
Jun 5 21:00:00 - 21:59:59 230 5.6% 0.06601.5 KB 5.0% 0.17
Jun 5 22:00:00 - 22:59:59 220 5.4% 0.06589.6 KB 4.9% 0.16
Jun 5 23:00:00 - 23:59:59 146 3.6% 0.04453.3 KB 3.8% 0.13
Jun 6 00:00:00 - 00:59:59 144 3.5% 0.04539.2 KB 4.5% 0.15
Jun 6 01:00:00 - 01:59:59 203 5.0% 0.06732.3 KB 6.1% 0.20
Jun 6 02:00:00 - 02:59:59 120 2.9% 0.03308.6 KB 2.6% 0.09
Jun 6 03:00:00 - 03:00:05 11 0.3% 2.2015.3 KB 0.1% 3.07
TOTAL: 24:00:01 4075 100.0% 0.0511.8 MB 100.0% 0.14
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1twilightnode-out.news.weretis.net 1680 1432 0 0 0 0 0 0 248
2news.sklaffkom.se 18 17 0 0 0 0 0 0 1
TOTAL: 2 1698 1449 0 0 0 0 0 0 249

Unwanted newsgroups [Top 20]:

NewsgroupCount
it.hobby.cucina 56
muc.lists.freebsd.bugs 54
nl.politiek 49
it.sport.calcio.milan 48
pl.soc.prawo 47
alt.slack 41
fr.sci.maths 39
uk.legal.moderated 36
fido7.ru.military 33
alt.usage.english 32
linux.debian.user 32
de.alt.fan.aldi 29
de.talk.jokes 26
it.discussioni.auto 26
alt.prophecies.nostradamus 24
hfx.general 24
fido7.ru.fidonet.today 23
pl.misc.elektronika 22
aus.politics 20
cn.comp 20
TOTAL: 212 1449

Perl filter (innd) [Top 20]:

ReasonCount
EMP (phl) 145
User-issued cancel 28
Too many newsgroups (meow) 22
Too many newsgroups 10
EMP (md5) 8
HTML Multipart 1
TOTAL: 6 214

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 34
news.sklaffkom.se 1
TOTAL: 2 35
TOTAL: 1 35

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1chimia.se 4076 4035 0 40 0 0 98%23:58:46
2sklaffkom.se 4362 972 2092 1009 0 0 22%23:59:34
3weretis.net 60 0 46 0 0 0 0%06:33:50
4sklaff.dev 0 0 0 0 0 4070 0%23:57:37
5thebunker.nu 0 0 0 0 0 4075 0%23:59:57
6usenet.blueworldhosting.com 0 0 0 0 0 3557 0%23:59:57
TOTAL: 6 8498 5007 2138 1049 0 11702 58%126:29:41
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1chimia.se11.7 MB51.8 KB11.8 MB0.1 KB/s3.0 KB23:58:46
2sklaffkom.se1.7 MB3.5 MB5.2 MB0.1 KB/s2.7 KB23:59:34
3sklaff.dev0.0 KB0.0 KB0.0 KB0.0 KB/s023:57:37
4thebunker.nu0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:57
5usenet.blueworldhosting.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:57
6weretis.net0.0 KB0.0 KB0.0 KB0.0 KB/s006:33:50
TOTAL: 613.4 MB3.6 MB17.0 MB0.0 KB/s2.9 KB126:29:41
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
177.155.45.199.censys-scanner.com 3 00.0 KB 0 0 000:00:07
293.152.208.38 2 00.0 KB 0 0 000:00:00
3azpdcsxfeo6r.stretchoid.com 2 00.0 KB 0 0 000:00:10
4188.240.59.3 1 00.0 KB 0 0 000:00:00
5193.32.209.254 1 00.0 KB 0 0 000:00:00
6205.210.31.111 1 00.0 KB 0 0 000:00:00
73.211.203.35.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
845-56-79-53.ip.linodeusercontent.com 1 00.0 KB 0 0 000:00:01
972-14-178-148.ip.linodeusercontent.com 1 00.0 KB 0 0 000:00:00
10ec2-35-87-246-133.us-west-2.compute.amazonaws.com 1 00.0 KB 0 0 000:00:00
11hassan.probe.onyphe.net 1 00.0 KB 0 0 000:00:02
12pace.probe.onyphe.net 1 00.0 KB 0 0 000:00:01
TOTAL: 12 16 00.0 KB 0 0 000:00:25

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 5 00.0 KB 0 0 000:00:01
2*.199.censys-scanner.com 3 00.0 KB 0 0 000:00:07
3*.ip.linodeusercontent.com 2 00.0 KB 0 0 000:00:01
4*.probe.onyphe.net 2 00.0 KB 0 0 000:00:04
5*.stretchoid.com 2 00.0 KB 0 0 000:00:10
6*.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
7*.compute.amazonaws.com 1 00.0 KB 0 0 000:00:00
TOTAL: 7 16 00.0 KB 0 0 000:00:25

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
azpdcsxfeo6r.stretchoid.com 0.009 0.016 0.00000:00:10
77.155.45.199.censys-scanner.com 0.037 0.030 0.00000:00:07
hassan.probe.onyphe.net 0.003 0.007 0.00000:00:02
45-56-79-53.ip.linodeusercontent.com 0.005 0.011 0.00000:00:01
pace.probe.onyphe.net 0.004 0.014 0.00000:00:01
188.240.59.3 0.004 0.013 0.00000:00:00
72-14-178-148.ip.linodeusercontent.com 0.005 0.017 0.00000:00:00
193.32.209.254 0.004 0.013 0.00000:00:00
205.210.31.111 0.006 0.010 0.00000:00:00
ec2-35-87-246-133.us-west-2.compute.amazonaws.com 0.005 0.015 0.00000:00:00
3.211.203.35.bc.googleusercontent.com 0.002 0.013 0.00000:00:00
93.152.208.38 0.005 0.018 0.00000:00:00
TOTAL: 12 0.089 0.177 0.00000:00:25

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
93.152.208.38 9
3.211.203.35.bc.googleusercontent.com 4
pace.probe.onyphe.net 2
77.155.45.199.censys-scanner.com 1
azpdcsxfeo6r.stretchoid.com 1
TOTAL: 5 17

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
GET / HTTP/1.1 2
Host: 172.234.115.63:119 2
#026#003#001#002 1
#026#003#003#002c#001 1
?#024?#011?#023 1
?$?,?r?s?#023#002#023#001?#024?#007?#022?#023?'?/?#024?(?0?`?a... 1
Accept-Encoding: gzip 1
Accept-Encoding: gzip, deflate, br 1
Accept-Language: en-US,en;q=0.9 1
Accept: text/html,application/xhtml+xml,... 1
Connection: close 1
EHLO www.censys.io 1
MGLNDD_172.234.115.63_119 1
User-Agent: Hello from Palo Alto Network... 1
User-Agent: Mozilla/5.0 (Windows NT 10.0... 1
TOTAL: 15 17

NNRP client timeouts [Top 20]:

SystemConnPeer
188.240.59.3 1 1
77.155.45.199.censys-scanner.com 1 2
TOTAL: 2 2 7