Daily Usenet report

Jun 12 03:00:05 -- Jun 13 03:00:05

Unknown entries from news log file:

First 50 / 900 lines (5.6%)

Jun 12 03:01:24 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Jun 12 07:46:15 twilightnode nnrpd[1755359]: Reading access from /usr/local/news/etc/readers.conf
Jun 12 07:46:15 twilightnode nnrpd[1755359]: Auth strategy 'localhost' does not match client. Removing.
Jun 12 07:46:15 twilightnode nnrpd[1755359]: 93.152.208.42 res <anonymous>
Jun 12 07:46:15 twilightnode nnrpd[1755359]: 93.152.208.42 no_match_user <anonymous> <localhost>
Jun 12 07:46:15 twilightnode nnrpd[1755359]: 93.152.208.42 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 12 07:46:15 twilightnode nnrpd[1755359]: 93.152.208.42 match_user <anonymous> <anonymous>
Jun 12 07:46:15 twilightnode nnrpd[1755359]: 93.152.208.42 no_post anonymous-read
Jun 12 07:46:15 twilightnode nnrpd[1755360]: Reading access from /usr/local/news/etc/readers.conf
Jun 12 07:46:15 twilightnode nnrpd[1755360]: Auth strategy 'localhost' does not match client. Removing.
Jun 12 07:46:15 twilightnode nnrpd[1755360]: 93.152.208.42 res <anonymous>
Jun 12 07:46:15 twilightnode nnrpd[1755360]: 93.152.208.42 no_match_user <anonymous> <localhost>
Jun 12 07:46:15 twilightnode nnrpd[1755360]: 93.152.208.42 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 12 07:46:15 twilightnode nnrpd[1755360]: 93.152.208.42 match_user <anonymous> <anonymous>
Jun 12 07:46:15 twilightnode nnrpd[1755360]: 93.152.208.42 no_post anonymous-read
Jun 12 07:47:11 twilightnode nnrpd[1755363]: Reading access from /usr/local/news/etc/readers.conf
Jun 12 07:47:11 twilightnode nnrpd[1755363]: Auth strategy 'localhost' does not match client. Removing.
Jun 12 07:47:11 twilightnode nnrpd[1755363]: 165.154.58.108 res <anonymous>
Jun 12 07:47:11 twilightnode nnrpd[1755363]: 165.154.58.108 no_match_user <anonymous> <localhost>
Jun 12 07:47:11 twilightnode nnrpd[1755363]: 165.154.58.108 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 12 07:47:11 twilightnode nnrpd[1755363]: 165.154.58.108 match_user <anonymous> <anonymous>
Jun 12 07:47:11 twilightnode nnrpd[1755363]: 165.154.58.108 no_post anonymous-read
Jun 12 07:47:12 twilightnode nnrpd[1755364]: Reading access from /usr/local/news/etc/readers.conf
Jun 12 07:47:12 twilightnode nnrpd[1755364]: Auth strategy 'localhost' does not match client. Removing.
Jun 12 07:47:12 twilightnode nnrpd[1755364]: 165.154.58.108 res <anonymous>
Jun 12 07:47:12 twilightnode nnrpd[1755364]: 165.154.58.108 no_match_user <anonymous> <localhost>
Jun 12 07:47:12 twilightnode nnrpd[1755364]: 165.154.58.108 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 12 07:47:12 twilightnode nnrpd[1755364]: 165.154.58.108 match_user <anonymous> <anonymous>
Jun 12 07:47:12 twilightnode nnrpd[1755364]: 165.154.58.108 no_post anonymous-read
Jun 12 07:47:22 twilightnode nnrpd[1755365]: Reading access from /usr/local/news/etc/readers.conf
Jun 12 07:47:22 twilightnode nnrpd[1755365]: Auth strategy 'localhost' does not match client. Removing.
Jun 12 07:47:22 twilightnode nnrpd[1755365]: 165.154.58.108 res <anonymous>
Jun 12 07:47:22 twilightnode nnrpd[1755365]: 165.154.58.108 no_match_user <anonymous> <localhost>
Jun 12 07:47:22 twilightnode nnrpd[1755365]: 165.154.58.108 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 12 07:47:22 twilightnode nnrpd[1755365]: 165.154.58.108 match_user <anonymous> <anonymous>
Jun 12 07:47:22 twilightnode nnrpd[1755365]: 165.154.58.108 no_post anonymous-read
Jun 12 07:57:49 twilightnode nnrpd[1755764]: Reading access from /usr/local/news/etc/readers.conf
Jun 12 07:57:49 twilightnode nnrpd[1755764]: Auth strategy 'localhost' does not match client. Removing.
Jun 12 07:57:49 twilightnode nnrpd[1755764]: 69.5.169.176 res <anonymous>
Jun 12 07:57:49 twilightnode nnrpd[1755764]: 69.5.169.176 no_match_user <anonymous> <localhost>
Jun 12 07:57:49 twilightnode nnrpd[1755764]: 69.5.169.176 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 12 07:57:49 twilightnode nnrpd[1755764]: 69.5.169.176 match_user <anonymous> <anonymous>
Jun 12 07:57:49 twilightnode nnrpd[1755764]: 69.5.169.176 no_post anonymous-read
Jun 12 07:58:01 twilightnode nnrpd[1755775]: Reading access from /usr/local/news/etc/readers.conf
Jun 12 07:58:01 twilightnode nnrpd[1755775]: Auth strategy 'localhost' does not match client. Removing.
Jun 12 07:58:01 twilightnode nnrpd[1755775]: 69.5.169.40 res <anonymous>
Jun 12 07:58:01 twilightnode nnrpd[1755775]: 69.5.169.40 no_match_user <anonymous> <localhost>
Jun 12 07:58:01 twilightnode nnrpd[1755775]: 69.5.169.40 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 12 07:58:01 twilightnode nnrpd[1755775]: 69.5.169.40 match_user <anonymous> <anonymous>
Jun 12 07:58:01 twilightnode nnrpd[1755775]: 69.5.169.40 no_post anonymous-read

Log entries by program:

Program nameLines%LinesSize%Size
inn 5493 59.3%897.2 KB 64.3%
innfeed 1712 18.5%235.5 KB 16.9%
nnrpd 1218 13.2%140.7 KB 10.1%
innd 834 9.0%122.3 KB 8.8%
TOTAL: 4 9257 100.0%1.4 MB100.0%

History cache:

ReasonCount%Count
Negative hits 5919 35.0%
Positive hits 5569 32.9%
Do not exist 5437 32.1%
Cache misses 0 0.0%
TOTAL: 4 16925 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.003 0.0%1 3.000 3.000 3.000
article cleanup00:00:00.073 0.0%5437 0.000 0.013 0.080
article logging00:00:00.287 0.0%5470 0.000 0.052 0.250
article parse00:00:00.070 0.0%6593 0.000 0.011 0.075
article write00:00:03.536 0.0%4058 0.375 0.871 2.725
data move00:00:00.042 0.0%18122 0.000 0.002 0.025
hisgrep/artcncl00:00:00.002 0.0%1 2.000 2.000 2.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.320 0.0%16929 0.125 0.255 0.926
history sync00:00:00.069 0.0%411 0.000 0.168 2.000
history write00:00:03.026 0.0%5437 0.000 0.557 1.667
idle23:50:39.985100.0%18306 2188.460 4689.172 30037.000
nntp read00:00:00.503 0.0%17770 0.000 0.028 0.088
overview write00:00:01.817 0.0%4058 0.162 0.448 1.909
perl filter00:00:10.972 0.0%5437 1.192 2.018 15.040
python filter00:00:00.967 0.0%5437 0.000 0.178 1.080
site send00:00:00.131 0.0%4058 0.000 0.032 0.133
TOTAL: 1723:51:05.803100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.012 0.0%4059 0.000 0.003 0.083
article prepare00:00:00.001 0.0%23904 0.000 0.000 0.006
article read00:00:00.689 0.0%4057 0.000 0.170 0.600
backlog stats00:00:00.020 0.0%27157 0.000 0.001 0.009
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.242 0.0%14860 0.000 0.016 0.077
data write00:00:00.369 0.0%10861 0.000 0.034 0.154
idle23:50:05.248100.0%27157 1722.426 3159.600 9687.968
status file00:00:00.309 0.0%367 0.000 0.842 5.000
TOTAL: 923:50:06.890100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:02:26.599100.0%107 8.000 1370.084 14971.500
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.009 0.0%369 0.000 0.024 1.000
TOTAL: 300:02:26.608100.0%----

Control commands to innd:

CommandNumber
flush 3
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 167

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 3 11040 4065 5594 1381 36%48:33:56
2news.sklaffkom.se 47 155 103 37 15 66%14:11:49
3localhost 25 0 0 0 0 0%00:00:00
4news.chimia.se 1 0 0 0 0 0%00:10:00
TOTAL: 4 76 11195 4168 5631 1396 37%62:55:45
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net11.5 MB0.0 KB4.4 MB15.9 MB 72%3.0 KB
2news.sklaffkom.se319.6 KB0.0 KB23.9 KB343.5 KB 93%2.9 KB
3localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
4news.chimia.se0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 411.8 MB0.0 KB4.5 MB16.3 MB 72%3.0 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Jun 12 03:00:05 - 03:59:59 116 2.8% 0.03330.7 KB 2.8% 0.09
Jun 12 04:00:00 - 04:59:59 89 2.2% 0.02271.3 KB 2.3% 0.08
Jun 12 05:00:00 - 05:59:59 54 1.3% 0.01139.9 KB 1.2% 0.04
Jun 12 06:00:00 - 06:59:59 135 3.3% 0.04392.7 KB 3.3% 0.11
Jun 12 07:00:00 - 07:59:59 94 2.3% 0.03215.6 KB 1.8% 0.06
Jun 12 08:00:00 - 08:59:59 192 4.7% 0.05512.5 KB 4.3% 0.14
Jun 12 09:00:00 - 09:59:59 240 5.9% 0.07634.6 KB 5.4% 0.18
Jun 12 10:00:00 - 10:59:59 173 4.2% 0.05437.9 KB 3.7% 0.12
Jun 12 11:00:00 - 11:59:59 178 4.4% 0.05645.6 KB 5.5% 0.18
Jun 12 12:00:00 - 12:59:59 183 4.5% 0.05422.3 KB 3.6% 0.12
Jun 12 13:00:00 - 13:59:59 211 5.2% 0.06570.8 KB 4.8% 0.16
Jun 12 14:00:00 - 14:59:59 168 4.1% 0.05505.6 KB 4.3% 0.14
Jun 12 15:00:00 - 15:59:59 279 6.8% 0.08638.1 KB 5.4% 0.18
Jun 12 16:00:00 - 16:59:59 234 5.7% 0.07757.8 KB 6.4% 0.21
Jun 12 17:00:00 - 17:59:59 231 5.7% 0.06684.5 KB 5.8% 0.19
Jun 12 18:00:00 - 18:59:59 188 4.6% 0.05609.7 KB 5.2% 0.17
Jun 12 19:00:00 - 19:59:59 226 5.5% 0.06676.2 KB 5.7% 0.19
Jun 12 20:00:00 - 20:59:59 210 5.1% 0.06573.6 KB 4.9% 0.16
Jun 12 21:00:00 - 21:59:59 216 5.3% 0.06751.8 KB 6.4% 0.21
Jun 12 22:00:00 - 22:59:59 161 3.9% 0.04480.8 KB 4.1% 0.13
Jun 12 23:00:00 - 23:59:59 147 3.6% 0.04515.0 KB 4.4% 0.14
Jun 13 00:00:00 - 00:59:59 149 3.7% 0.04485.7 KB 4.1% 0.13
Jun 13 01:00:00 - 01:59:59 98 2.4% 0.03264.4 KB 2.2% 0.07
Jun 13 02:00:00 - 02:59:59 97 2.4% 0.03253.8 KB 2.2% 0.07
Jun 13 03:00:00 - 03:00:05 11 0.3% 2.2014.8 KB 0.1% 2.95
TOTAL: 24:00:00 4080 100.0% 0.0511.5 MB 100.0% 0.14
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1twilightnode-out.news.weretis.net 1397 1308 0 0 0 0 0 0 89
2news.sklaffkom.se 16 16 0 0 0 0 0 0 0
TOTAL: 2 1413 1324 0 0 0 0 0 0 89

Unwanted newsgroups [Top 20]:

NewsgroupCount
nl.politiek 59
de.rec.fahrrad 45
it.sport.calcio.milan 41
lada.talk 41
pl.misc.samochody 41
cn.comp 40
pl.soc.prawo 35
uk.d-i-y 34
alt.usage.english 30
fido7.ru.home 27
uk.legal.moderated 27
bln.test 23
it.discussioni.auto 23
alt.bestjobsusa.computer.jobs 20
dk.politik 20
de.talk.jokes 18
de.soc.recht.misc 17
it-alt.sport.calcio.juventus 17
it.hobby.cucina 17
alt.food.fast-food 16
TOTAL: 222 1324

Perl filter (innd) [Top 20]:

ReasonCount
EMP (phn path) 23
User-issued cancel 21
Too many newsgroups 9
HTML Multipart 2
EMP (md5) 1
TOTAL: 5 56

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 33
TOTAL: 1 33
TOTAL: 1 33

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1chimia.se 4071 4069 0 0 0 11 99%23:59:56
2sklaffkom.se 4380 984 2146 944 0 2 22%23:59:39
3weretis.net 149 0 104 0 0 0 0%11:18:45
4sklaff.dev 0 0 0 0 0 4074 0%23:58:32
5thebunker.nu 0 0 0 0 0 4080 0%23:59:56
6usenet.blueworldhosting.com 0 0 0 0 0 3743 0%23:59:56
TOTAL: 6 8600 5053 2250 944 0 11910 58%131:16:44
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1chimia.se11.5 MB0.0 KB11.5 MB0.1 KB/s2.9 KB23:59:56
2sklaffkom.se1.6 MB3.1 MB4.7 MB0.1 KB/s2.5 KB23:59:39
3sklaff.dev0.0 KB0.0 KB0.0 KB0.0 KB/s023:58:32
4thebunker.nu0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:56
5usenet.blueworldhosting.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:56
6weretis.net0.0 KB0.0 KB0.0 KB0.0 KB/s011:18:45
TOTAL: 613.1 MB3.1 MB16.2 MB0.0 KB/s2.8 KB131:16:44
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1prod52client01.academyforinternetresearch.org 60 00.0 KB 0 0 000:00:23
2165.154.58.108 3 00.0 KB 0 0 000:00:10
3173.186.132.66.censys-scanner.com 3 00.0 KB 0 0 000:00:18
493.152.208.42 2 00.0 KB 0 0 000:00:00
5azpdwsgi5356.stretchoid.com 2 00.0 KB 0 0 000:00:10
6100.195.132.66.censys-scanner.com 1 00.0 KB 0 0 000:00:00
7160.119.76.16 1 00.0 KB 0 0 000:00:04
8172.232.160.26.socradar-curiosity-wide-scan-project.socradar.com 1 00.0 KB 0 0 000:00:10
9205.210.31.108 1 00.0 KB 0 0 000:00:00
1069.5.169.176 1 00.0 KB 0 0 000:00:00
1169.5.169.40 1 00.0 KB 0 0 000:00:00
12battery.census.shodan.io 1 00.0 KB 0 0 000:00:00
13knapp.probe.onyphe.net 1 00.0 KB 0 0 000:00:00
14n304.scanner.modat.io 1 00.0 KB 0 0 000:00:00
15o307.scanner.modat.io 1 00.0 KB 0 0 000:00:00
16o316.scanner.modat.io 1 00.0 KB 0 0 000:00:29
17o331.scanner.modat.io 1 00.0 KB 0 0 000:00:00
18o336.scanner.modat.io 1 00.0 KB 0 0 000:00:00
19o340.scanner.modat.io 1 00.0 KB 0 0 000:00:28
20o341.scanner.modat.io 1 00.0 KB 0 0 000:00:00
21r5-57-39.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
22robert.probe.onyphe.net 1 00.0 KB 0 0 000:00:02
TOTAL: 22 87 00.0 KB 0 0 000:02:26

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1*.academyforinternetresearch.org 60 00.0 KB 0 0 000:00:23
2unresolved 9 00.0 KB 0 0 000:00:16
3*.scanner.modat.io 7 00.0 KB 0 0 000:01:00
4*.66.censys-scanner.com 4 00.0 KB 0 0 000:00:19
5*.probe.onyphe.net 2 00.0 KB 0 0 000:00:03
6*.stretchoid.com 2 00.0 KB 0 0 000:00:10
7*.census.shodan.io 1 00.0 KB 0 0 000:00:00
8*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
9*.socradar-curiosity-wide-scan-project.socradar.com 1 00.0 KB 0 0 000:00:10
TOTAL: 9 87 00.0 KB 0 0 000:02:26

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
o316.scanner.modat.io 0.007 0.012 0.00000:00:29
o340.scanner.modat.io 0.005 0.014 0.00000:00:28
prod52client01.academyforinternetresearch.org 1.805 0.531 0.00000:00:23
173.186.132.66.censys-scanner.com 0.041 0.030 0.00000:00:18
165.154.58.108 0.011 0.019 0.00000:00:10
azpdwsgi5356.stretchoid.com 0.008 0.014 0.00000:00:10
172.232.160.26.socradar-curiosity-wide-scan-project.socradar.com 0.004 0.012 0.00000:00:10
160.119.76.16 0.003 0.010 0.00000:00:04
robert.probe.onyphe.net 0.003 0.007 0.00000:00:02
r5-57-39.monitoring.internet-measurement.com 0.004 0.015 0.00000:00:01
knapp.probe.onyphe.net 0.004 0.022 0.00000:00:00
100.195.132.66.censys-scanner.com 0.027 0.022 0.00000:00:00
n304.scanner.modat.io 0.005 0.015 0.00000:00:00
o341.scanner.modat.io 0.006 0.015 0.00000:00:00
o336.scanner.modat.io 0.019 0.037 0.00000:00:00
93.152.208.42 0.010 0.017 0.00000:00:00
o331.scanner.modat.io 0.004 0.014 0.00000:00:00
battery.census.shodan.io 0.003 0.014 0.00000:00:00
205.210.31.108 0.005 0.005 0.00000:00:00
69.5.169.40 0.003 0.008 0.00000:00:00
TOTAL: 22 1.984 0.862 0.00000:02:26

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
93.152.208.42 9
o331.scanner.modat.io 5
o341.scanner.modat.io 5
165.154.58.108 2
knapp.probe.onyphe.net 2
o307.scanner.modat.io 2
100.195.132.66.censys-scanner.com 1
173.186.132.66.censys-scanner.com 1
azpdwsgi5356.stretchoid.com 1
o316.scanner.modat.io 1
o340.scanner.modat.io 1
TOTAL: 11 30

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
GET / HTTP/1.1 3
Host: 172.234.115.63:119 3
#026#003#001 2
Accept-Encoding: gzip 2
Accept: */* 2
EHLO www.censys.io 2
SSH-2.0-Go 2
User-Agent: Mozilla/5.0 (compatible; Mod... 2
#023#003#023#001#023#002#001 1
#026#003#001#002 1
#026#003#003#002c#001 1
?#024 1
?#024?#011?#023 1
?$?,?r?s?#023#002#023#001?#024?#007?#022?#023?'?/?#024?(?0?`?a... 1
Accept-Encoding: gzip, deflate, br 1
Accept-Language: en-US,en;q=0.9 1
Accept: text/html,application/xhtml+xml,... 1
Connection: close 1
MGLNDD_172.234.115.63_119 1
User-Agent: Mozilla/5.0 (Windows NT 10.0... 1
TOTAL: 20 30

NNRP client timeouts [Top 20]:

SystemConnPeer
173.186.132.66.censys-scanner.com 1 2
69.5.169.40 1 1
prod52client01.academyforinternetresearch.org 1 1
TOTAL: 3 3 7
innreport from INN 2.7.3 based on initial work (©) 1996-2001 by Fabien Tassin <fta@sofaraway.org> and enhanced by several contributors since then