Daily Usenet report

Jun 15 03:00:05 -- Jun 16 03:00:05

Unknown entries from news log file:

First 50 / 132 lines (37.9%)

Jun 15 03:01:17 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Jun 15 06:09:53 twilightnode nnrpd[1959553]: Reading access from /usr/local/news/etc/readers.conf
Jun 15 06:09:53 twilightnode nnrpd[1959553]: Auth strategy 'localhost' does not match client. Removing.
Jun 15 06:09:53 twilightnode nnrpd[1959553]: 205.210.31.51 res <anonymous>
Jun 15 06:09:53 twilightnode nnrpd[1959553]: 205.210.31.51 no_match_user <anonymous> <localhost>
Jun 15 06:09:53 twilightnode nnrpd[1959553]: 205.210.31.51 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 15 06:09:53 twilightnode nnrpd[1959553]: 205.210.31.51 match_user <anonymous> <anonymous>
Jun 15 06:09:53 twilightnode nnrpd[1959553]: 205.210.31.51 no_post anonymous-read
Jun 15 06:30:36 twilightnode nnrpd[1960425]: Reading access from /usr/local/news/etc/readers.conf
Jun 15 06:30:36 twilightnode nnrpd[1960425]: Auth strategy 'localhost' does not match client. Removing.
Jun 15 06:30:36 twilightnode nnrpd[1960425]: 64.195.132.66.censys-scanner.com res <anonymous>
Jun 15 06:30:36 twilightnode nnrpd[1960425]: 64.195.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Jun 15 06:30:36 twilightnode nnrpd[1960425]: 64.195.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 15 06:30:36 twilightnode nnrpd[1960425]: 64.195.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Jun 15 06:30:36 twilightnode nnrpd[1960425]: 64.195.132.66.censys-scanner.com no_post anonymous-read
Jun 15 06:30:37 twilightnode nnrpd[1960425]: 64.195.132.66.censys-scanner.com res <anonymous>
Jun 15 06:30:37 twilightnode nnrpd[1960425]: 64.195.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Jun 15 06:30:37 twilightnode nnrpd[1960425]: 64.195.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 15 06:30:37 twilightnode nnrpd[1960425]: 64.195.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Jun 15 06:30:37 twilightnode nnrpd[1960425]: 64.195.132.66.censys-scanner.com no_post anonymous-read
Jun 15 08:31:08 twilightnode nnrpd[1965435]: Reading access from /usr/local/news/etc/readers.conf
Jun 15 08:31:08 twilightnode nnrpd[1965435]: Auth strategy 'localhost' does not match client. Removing.
Jun 15 08:31:08 twilightnode nnrpd[1965435]: vilnius.scan.bufferover.run res <anonymous>
Jun 15 08:31:08 twilightnode nnrpd[1965435]: vilnius.scan.bufferover.run no_match_user <anonymous> <localhost>
Jun 15 08:31:08 twilightnode nnrpd[1965435]: vilnius.scan.bufferover.run no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 15 08:31:08 twilightnode nnrpd[1965435]: vilnius.scan.bufferover.run match_user <anonymous> <anonymous>
Jun 15 08:31:08 twilightnode nnrpd[1965435]: vilnius.scan.bufferover.run no_post anonymous-read
Jun 15 08:31:08 twilightnode nnrpd[1965436]: Reading access from /usr/local/news/etc/readers.conf
Jun 15 08:31:08 twilightnode nnrpd[1965436]: Auth strategy 'localhost' does not match client. Removing.
Jun 15 08:31:08 twilightnode nnrpd[1965436]: vilnius.scan.bufferover.run res <anonymous>
Jun 15 08:31:08 twilightnode nnrpd[1965436]: vilnius.scan.bufferover.run no_match_user <anonymous> <localhost>
Jun 15 08:31:08 twilightnode nnrpd[1965436]: vilnius.scan.bufferover.run no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 15 08:31:08 twilightnode nnrpd[1965436]: vilnius.scan.bufferover.run match_user <anonymous> <anonymous>
Jun 15 08:31:08 twilightnode nnrpd[1965436]: vilnius.scan.bufferover.run no_post anonymous-read
Jun 15 08:39:40 twilightnode nnrpd[1965774]: Reading access from /usr/local/news/etc/readers.conf
Jun 15 08:39:40 twilightnode nnrpd[1965774]: Auth strategy 'localhost' does not match client. Removing.
Jun 15 08:39:40 twilightnode nnrpd[1965774]: 45-79-207-252.ip.linodeusercontent.com res <anonymous>
Jun 15 08:39:40 twilightnode nnrpd[1965774]: 45-79-207-252.ip.linodeusercontent.com no_match_user <anonymous> <localhost>
Jun 15 08:39:40 twilightnode nnrpd[1965774]: 45-79-207-252.ip.linodeusercontent.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 15 08:39:40 twilightnode nnrpd[1965774]: 45-79-207-252.ip.linodeusercontent.com match_user <anonymous> <anonymous>
Jun 15 08:39:40 twilightnode nnrpd[1965774]: 45-79-207-252.ip.linodeusercontent.com no_post anonymous-read
Jun 15 10:13:39 twilightnode nnrpd[1969876]: Reading access from /usr/local/news/etc/readers.conf
Jun 15 10:13:39 twilightnode nnrpd[1969876]: Auth strategy 'localhost' does not match client. Removing.
Jun 15 10:13:39 twilightnode nnrpd[1969876]: watkins.probe.onyphe.net res <anonymous>
Jun 15 10:13:39 twilightnode nnrpd[1969876]: watkins.probe.onyphe.net no_match_user <anonymous> <localhost>
Jun 15 10:13:39 twilightnode nnrpd[1969876]: watkins.probe.onyphe.net no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 15 10:13:39 twilightnode nnrpd[1969876]: watkins.probe.onyphe.net match_user <anonymous> <anonymous>
Jun 15 10:13:39 twilightnode nnrpd[1969876]: watkins.probe.onyphe.net no_post anonymous-read
Jun 15 10:13:40 twilightnode nnrpd[1969877]: Reading access from /usr/local/news/etc/readers.conf
Jun 15 10:13:40 twilightnode nnrpd[1969877]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 5857 68.7%951.8 KB 72.1%
innfeed 1560 18.3%210.4 KB 15.9%
innd 875 10.3%129.5 KB 9.8%
nnrpd 210 2.5%22.1 KB 1.7%
controlchan 26 0.3%6.1 KB 0.5%
pgpverify 2 0.0%0.3 KB 0.0%
TOTAL: 6 8530 100.0%1.3 MB100.0%

History cache:

ReasonCount%Count
Negative hits 6360 35.2%
Positive hits 5933 32.8%
Do not exist 5796 32.0%
Cache misses 0 0.0%
TOTAL: 4 18089 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.010 0.0%7 1.000 1.429 2.000
article cleanup00:00:00.041 0.0%5812 0.000 0.007 0.588
article logging00:00:00.282 0.0%5847 0.000 0.048 0.154
article parse00:00:00.093 0.0%7645 0.000 0.012 0.150
article write00:00:04.568 0.0%4236 0.516 1.078 16.500
data move00:00:00.054 0.0%20202 0.000 0.003 0.026
hisgrep/artcncl00:00:00.003 0.0%7 0.000 0.429 1.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:06.173 0.0%18144 0.138 0.340 2.280
history sync00:00:00.050 0.0%414 0.000 0.121 1.000
history write00:00:03.435 0.0%5812 0.200 0.591 7.200
idle24:00:34.344100.0%20007 863.419 4320.205 28570.095
nntp read00:00:00.631 0.0%19612 0.000 0.032 0.229
overview write00:00:02.250 0.0%4236 0.114 0.531 2.800
perl filter00:00:12.004 0.0%5812 1.146 2.065 18.353
python filter00:00:00.968 0.0%5812 0.024 0.167 2.000
site send00:00:00.127 0.0%4238 0.000 0.030 0.261
TOTAL: 1724:01:05.033100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.015 0.0%4218 0.000 0.004 0.167
article prepare00:00:00.002 0.0%25812 0.000 0.000 0.003
article read00:00:00.771 0.0%4216 0.000 0.183 0.812
backlog stats00:00:00.017 0.0%28696 0.000 0.001 0.009
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.236 0.0%15804 0.000 0.015 0.074
data write00:00:00.320 0.0%11638 0.000 0.027 0.125
idle23:50:15.477100.0%28696 1306.657 2990.503 10083.083
status file00:00:00.208 0.0%310 0.000 0.671 6.000
TOTAL: 923:50:17.046100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:23.849100.0%27 29.000 883.296 10275.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.000 0.0%123 0.000 0.000 0.000
TOTAL: 300:00:23.849100.0%----

Control commands to innd:

CommandNumber
flush 3
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 167

Control channel:

SendernewgrouprmgroupOtherBad PGPDoItOK
group-admin@isc.org002202
TOTAL002202

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 4 11159 4182 5478 1499 37%46:02:33
2news.sklaffkom.se 41 151 50 37 64 33%12:49:20
3localhost 25 0 0 0 0 0%00:00:00
4news.chimia.se 1 0 0 0 0 0%00:10:00
TOTAL: 4 71 11310 4232 5515 1563 37%59:01:53
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net12.5 MB0.0 KB8.3 MB20.8 MB 59%3.7 KB
2news.sklaffkom.se137.8 KB0.0 KB161.1 KB298.9 KB 46%2.6 KB
3localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
4news.chimia.se0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 412.6 MB0.0 KB8.5 MB21.1 MB 59%3.7 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Jun 15 03:00:05 - 03:59:59 71 1.7% 0.02190.9 KB 1.5% 0.05
Jun 15 04:00:00 - 04:59:59 89 2.1% 0.02356.6 KB 2.8% 0.10
Jun 15 05:00:00 - 05:59:59 141 3.3% 0.04471.1 KB 3.6% 0.13
Jun 15 06:00:00 - 06:59:59 111 2.6% 0.03373.7 KB 2.9% 0.10
Jun 15 07:00:00 - 07:59:59 168 4.0% 0.05572.4 KB 4.4% 0.16
Jun 15 08:00:00 - 08:59:59 131 3.1% 0.04372.5 KB 2.9% 0.10
Jun 15 09:00:00 - 09:59:59 183 4.3% 0.05559.2 KB 4.3% 0.16
Jun 15 10:00:00 - 10:59:59 192 4.5% 0.05555.0 KB 4.3% 0.15
Jun 15 11:00:00 - 11:59:59 169 4.0% 0.05371.5 KB 2.9% 0.10
Jun 15 12:00:00 - 12:59:59 172 4.1% 0.05459.8 KB 3.6% 0.13
Jun 15 13:00:00 - 13:59:59 182 4.3% 0.05458.6 KB 3.5% 0.13
Jun 15 14:00:00 - 14:59:59 204 4.8% 0.06538.0 KB 4.2% 0.15
Jun 15 15:00:00 - 15:59:59 205 4.8% 0.06548.2 KB 4.2% 0.15
Jun 15 16:00:00 - 16:59:59 223 5.3% 0.06716.3 KB 5.5% 0.20
Jun 15 17:00:00 - 17:59:59 241 5.7% 0.071.1 MB 8.7% 0.31
Jun 15 18:00:00 - 18:59:59 231 5.4% 0.06617.4 KB 4.8% 0.17
Jun 15 19:00:00 - 19:59:59 229 5.4% 0.06687.7 KB 5.3% 0.19
Jun 15 20:00:00 - 20:59:59 189 4.5% 0.05520.8 KB 4.0% 0.14
Jun 15 21:00:00 - 21:59:59 207 4.9% 0.06633.1 KB 4.9% 0.18
Jun 15 22:00:00 - 22:59:59 189 4.5% 0.05490.4 KB 3.8% 0.14
Jun 15 23:00:00 - 23:59:59 186 4.4% 0.05564.5 KB 4.4% 0.16
Jun 16 00:00:00 - 00:59:59 185 4.4% 0.05613.0 KB 4.7% 0.17
Jun 16 01:00:00 - 01:59:59 205 4.8% 0.06743.4 KB 5.8% 0.21
Jun 16 02:00:00 - 02:59:59 131 3.1% 0.04376.6 KB 2.9% 0.10
Jun 16 03:00:00 - 03:00:05 10 0.2% 2.0012.1 KB 0.1% 2.43
TOTAL: 24:00:00 4244 100.0% 0.0512.6 MB 100.0% 0.15
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1twilightnode-out.news.weretis.net 1549 1402 0 0 0 0 0 0 147
2news.sklaffkom.se 64 64 0 0 0 0 0 0 0
TOTAL: 2 1613 1466 0 0 0 0 0 0 147

Unwanted newsgroups [Top 20]:

NewsgroupCount
it.sport.calcio.milan 73
it.hobby.cucina 49
eternal-september.talk 38
fr.sci.maths 35
alt.food.fast-food 33
free.it.ai.general 29
uk.legal.moderated 29
lada.talk 28
hfx.general 27
nl.politiek 27
pl.misc.samochody 27
alt.clothing.lingerie 26
de.rec.fahrrad 26
pl.soc.polityka 26
de.alt.folklore.computer 25
fido7.ru.military 22
eternal-september.support 21
alt.slack 20
alt.usage.english 20
cn.comp 20
TOTAL: 240 1466

Perl filter (innd) [Top 20]:

ReasonCount
EMP (phn path) 61
User-issued cancel 36
Too many newsgroups 7
HTML Multipart 4
Too many newsgroups (meow) 4
TOTAL: 5 112

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 35
TOTAL: 1 35
TOTAL: 1 35

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1chimia.se 4246 4203 11 30 0 0 98%23:59:54
2sklaffkom.se 4612 775 1977 1487 0 1 16%23:59:57
3weretis.net 68 0 50 0 0 0 0%05:58:04
4sklaff.dev 0 0 0 0 0 4238 0%23:59:55
5thebunker.nu 0 0 0 0 0 4244 0%23:59:57
6usenet.blueworldhosting.com 0 0 0 0 0 3922 0%23:59:57
TOTAL: 6 8926 4978 2038 1517 0 12405 55%125:57:44
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1chimia.se12.5 MB131.3 KB12.6 MB0.1 KB/s3.0 KB23:59:54
2sklaffkom.se1.3 MB4.8 MB6.1 MB0.1 KB/s2.7 KB23:59:57
3sklaff.dev0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:55
4thebunker.nu0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:57
5usenet.blueworldhosting.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:57
6weretis.net0.0 KB0.0 KB0.0 KB0.0 KB/s005:58:04
TOTAL: 613.8 MB4.9 MB18.7 MB0.0 KB/s2.9 KB125:57:44
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
150.146.94.167.censys-scanner.com 3 00.0 KB 0 0 000:00:04
2160.119.76.42 2 00.0 KB 0 0 000:00:01
3azpdssm71sbu.stretchoid.com 2 00.0 KB 0 0 000:00:10
4o304.scanner.modat.io 2 00.0 KB 0 0 000:00:00
5vilnius.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
6205.210.31.51 1 00.0 KB 0 0 000:00:00
745-79-207-252.ip.linodeusercontent.com 1 00.0 KB 0 0 000:00:00
864.195.132.66.censys-scanner.com 1 00.0 KB 0 0 000:00:00
9izabella.probe.onyphe.net 1 00.0 KB 0 0 000:00:02
10r3-3-3.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:02
11watkins.probe.onyphe.net 1 00.0 KB 0 0 000:00:00
TOTAL: 11 17 00.0 KB 0 0 000:00:23

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1*.167.censys-scanner.com 3 00.0 KB 0 0 000:00:04
2unresolved 3 00.0 KB 0 0 000:00:01
3*.probe.onyphe.net 2 00.0 KB 0 0 000:00:03
4*.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
5*.scanner.modat.io 2 00.0 KB 0 0 000:00:00
6*.stretchoid.com 2 00.0 KB 0 0 000:00:10
7*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:00
8*.ip.linodeusercontent.com 1 00.0 KB 0 0 000:00:00
9*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:02
TOTAL: 9 17 00.0 KB 0 0 000:00:23

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
azpdssm71sbu.stretchoid.com 0.011 0.024 0.00000:00:10
50.146.94.167.censys-scanner.com 0.032 0.035 0.00000:00:04
izabella.probe.onyphe.net 0.005 0.003 0.00000:00:02
r3-3-3.monitoring.internet-measurement.com 0.003 0.017 0.00000:00:02
160.119.76.42 0.004 0.017 0.00000:00:01
64.195.132.66.censys-scanner.com 0.034 0.024 0.00000:00:00
watkins.probe.onyphe.net 0.005 0.012 0.00000:00:00
vilnius.scan.bufferover.run 0.008 0.025 0.00000:00:00
45-79-207-252.ip.linodeusercontent.com 0.004 0.007 0.00000:00:00
205.210.31.51 0.005 0.019 0.00000:00:00
o304.scanner.modat.io 0.013 0.039 0.00000:00:00
TOTAL: 11 0.124 0.222 0.00000:00:23

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
vilnius.scan.bufferover.run 7
160.119.76.42 5
watkins.probe.onyphe.net 2
50.146.94.167.censys-scanner.com 1
64.195.132.66.censys-scanner.com 1
azpdssm71sbu.stretchoid.com 1
TOTAL: 6 17

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
Accept: */* 2
EHLO www.censys.io 2
GET / HTTP/1.1 2
#001 1
#026#003#001 1
#026#003#003#002c#001 1
?$?,?r?s?#023#002#023#001?#024?#007?#022?#023?'?/?#024?(?0?`?a... 1
Accept-Encoding: gzip 1
Connection: close 1
Host: 172.234.115.63 1
Host: 172.234.115.63:119 1
MGLNDD_172.234.115.63_119 1
User-Agent: Mozilla/5.0 1
User-Agent: Mozilla/5.0 (Macintosh; Inte... 1
TOTAL: 14 17

NNRP client timeouts [Top 20]:

SystemConnPeer
50.146.94.167.censys-scanner.com 1 2
TOTAL: 1 1 4
innreport from INN 2.7.3 based on initial work (©) 1996-2001 by Fabien Tassin <fta@sofaraway.org> and enhanced by several contributors since then