Daily Usenet report

Jun 19 03:00:05 -- Jun 20 03:00:06

Unknown entries from news log file:

First 50 / 112 lines (44.6%)

Jun 19 03:01:17 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Jun 19 05:35:21 twilightnode nnrpd[2225806]: Reading access from /usr/local/news/etc/readers.conf
Jun 19 05:35:21 twilightnode nnrpd[2225806]: Auth strategy 'localhost' does not match client. Removing.
Jun 19 05:35:21 twilightnode nnrpd[2225806]: 195.140.214.26 res <anonymous>
Jun 19 05:35:21 twilightnode nnrpd[2225806]: 195.140.214.26 no_match_user <anonymous> <localhost>
Jun 19 05:35:21 twilightnode nnrpd[2225806]: 195.140.214.26 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 19 05:35:21 twilightnode nnrpd[2225806]: 195.140.214.26 match_user <anonymous> <anonymous>
Jun 19 05:35:21 twilightnode nnrpd[2225806]: 195.140.214.26 no_post anonymous-read
Jun 19 05:35:35 twilightnode nnrpd[2225807]: Reading access from /usr/local/news/etc/readers.conf
Jun 19 05:35:35 twilightnode nnrpd[2225807]: Auth strategy 'localhost' does not match client. Removing.
Jun 19 05:35:35 twilightnode nnrpd[2225807]: 69.5.169.21 res <anonymous>
Jun 19 05:35:35 twilightnode nnrpd[2225807]: 69.5.169.21 no_match_user <anonymous> <localhost>
Jun 19 05:35:35 twilightnode nnrpd[2225807]: 69.5.169.21 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 19 05:35:35 twilightnode nnrpd[2225807]: 69.5.169.21 match_user <anonymous> <anonymous>
Jun 19 05:35:35 twilightnode nnrpd[2225807]: 69.5.169.21 no_post anonymous-read
Jun 19 07:57:12 twilightnode nnrpd[2231639]: Reading access from /usr/local/news/etc/readers.conf
Jun 19 07:57:12 twilightnode nnrpd[2231639]: Auth strategy 'localhost' does not match client. Removing.
Jun 19 07:57:12 twilightnode nnrpd[2231639]: 81.19.216.103 res <anonymous>
Jun 19 07:57:12 twilightnode nnrpd[2231639]: 81.19.216.103 no_match_user <anonymous> <localhost>
Jun 19 07:57:12 twilightnode nnrpd[2231639]: 81.19.216.103 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 19 07:57:12 twilightnode nnrpd[2231639]: 81.19.216.103 match_user <anonymous> <anonymous>
Jun 19 07:57:12 twilightnode nnrpd[2231639]: 81.19.216.103 no_post anonymous-read
Jun 19 07:57:45 twilightnode nnrpd[2231642]: Reading access from /usr/local/news/etc/readers.conf
Jun 19 07:57:45 twilightnode nnrpd[2231642]: Auth strategy 'localhost' does not match client. Removing.
Jun 19 07:57:45 twilightnode nnrpd[2231642]: 69.5.169.89 res <anonymous>
Jun 19 07:57:45 twilightnode nnrpd[2231642]: 69.5.169.89 no_match_user <anonymous> <localhost>
Jun 19 07:57:45 twilightnode nnrpd[2231642]: 69.5.169.89 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 19 07:57:45 twilightnode nnrpd[2231642]: 69.5.169.89 match_user <anonymous> <anonymous>
Jun 19 07:57:45 twilightnode nnrpd[2231642]: 69.5.169.89 no_post anonymous-read
Jun 19 10:13:24 twilightnode innd: message repeated 14 times: [ ctlinnd command s]
Jun 19 12:16:49 twilightnode nnrpd[2243413]: Reading access from /usr/local/news/etc/readers.conf
Jun 19 12:16:49 twilightnode nnrpd[2243413]: Auth strategy 'localhost' does not match client. Removing.
Jun 19 12:16:49 twilightnode nnrpd[2243413]: 66.234.152.36 res <anonymous>
Jun 19 12:16:49 twilightnode nnrpd[2243413]: 66.234.152.36 no_match_user <anonymous> <localhost>
Jun 19 12:16:49 twilightnode nnrpd[2243413]: 66.234.152.36 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 19 12:16:49 twilightnode nnrpd[2243413]: 66.234.152.36 match_user <anonymous> <anonymous>
Jun 19 12:16:49 twilightnode nnrpd[2243413]: 66.234.152.36 no_post anonymous-read
Jun 19 14:00:38 twilightnode nnrpd[2247985]: Reading access from /usr/local/news/etc/readers.conf
Jun 19 14:00:38 twilightnode nnrpd[2247985]: Auth strategy 'localhost' does not match client. Removing.
Jun 19 14:00:38 twilightnode nnrpd[2247985]: o352.scanner.modat.io res <anonymous>
Jun 19 14:00:38 twilightnode nnrpd[2247985]: o352.scanner.modat.io no_match_user <anonymous> <localhost>
Jun 19 14:00:38 twilightnode nnrpd[2247985]: o352.scanner.modat.io no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 19 14:00:38 twilightnode nnrpd[2247985]: o352.scanner.modat.io match_user <anonymous> <anonymous>
Jun 19 14:00:38 twilightnode nnrpd[2247985]: o352.scanner.modat.io no_post anonymous-read
Jun 19 14:16:10 twilightnode nnrpd[2248573]: Reading access from /usr/local/news/etc/readers.conf
Jun 19 14:16:10 twilightnode nnrpd[2248573]: Auth strategy 'localhost' does not match client. Removing.
Jun 19 14:16:10 twilightnode nnrpd[2248573]: o352.scanner.modat.io res <anonymous>
Jun 19 14:16:10 twilightnode nnrpd[2248573]: o352.scanner.modat.io no_match_user <anonymous> <localhost>
Jun 19 14:16:10 twilightnode nnrpd[2248573]: o352.scanner.modat.io no_match_user <anonymous> *,!<anonymous>,!<localhost>
Jun 19 14:16:10 twilightnode nnrpd[2248573]: o352.scanner.modat.io match_user <anonymous> <anonymous>

Log entries by program:

Program nameLines%LinesSize%Size
innfeed 15292 64.1%2.1 MB 59.7%
inn 6895 28.9%1.2 MB 32.8%
innd 1496 6.3%254.0 KB 6.9%
nnrpd 186 0.8%20.1 KB 0.6%
controlchan 4 0.0%0.2 KB 0.0%
TOTAL: 5 23873 100.0%3.6 MB100.0%

History cache:

ReasonCount%Count
Positive hits 8268 36.0%
Negative hits 7849 34.2%
Do not exist 6816 29.7%
Cache misses 4 0.0%
TOTAL: 4 22937 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.000 0.0%0 0.000 0.000 0.000
article cleanup00:00:00.072 0.0%6830 0.000 0.011 0.107
article logging00:00:00.329 0.0%6866 0.000 0.048 0.235
article parse00:00:00.108 0.0%8509 0.000 0.013 0.222
article write00:00:04.884 0.0%4728 0.451 1.033 8.902
data move00:00:00.062 0.0%23948 0.000 0.003 0.041
hisgrep/artcncl00:00:00.000 0.0%0 0.000 0.000 0.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:05.286 0.0%22983 0.100 0.230 1.487
history sync00:00:00.055 0.0%381 0.000 0.144 1.000
history write00:00:04.125 0.0%6830 0.171 0.604 5.774
idle23:50:17.861100.0%23734 1542.165 3615.820 18755.906
nntp read00:00:00.629 0.0%23349 0.000 0.027 0.097
overview write00:00:02.255 0.0%4728 0.169 0.477 1.412
perl filter00:00:12.238 0.0%6830 0.866 1.792 15.920
python filter00:00:00.707 0.0%6830 0.000 0.104 0.412
site send00:00:00.122 0.0%4728 0.000 0.026 0.143
TOTAL: 1723:50:48.733100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.027 0.0%6647 0.000 0.004 0.133
article prepare00:00:00.003 0.0%28264 0.000 0.000 0.010
article read00:00:00.669 0.0%4733 0.000 0.141 0.567
backlog stats00:00:00.056 0.0%44280 0.000 0.001 0.018
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.339 0.0%23191 0.000 0.015 0.054
data write00:00:00.542 0.0%18538 0.000 0.029 0.137
idle23:49:45.183100.0%44280 1024.927 1937.335 9090.985
status file00:00:04.477 0.0%6012 0.000 0.745 4.143
TOTAL: 923:49:51.296100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:02:57.854 99.9%29 48.000 6132.897 18696.250
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.118 0.1%3257 0.000 0.036 0.037
readart00:00:00.001 0.0%1 1.000 1.000 1.000
TOTAL: 400:02:57.973100.0%----

Control commands to innd:

CommandNumber
flush 3
flushlogs 2
go 2
logmode 2
lowmark 1
mode 155
name 7
pause 2
paused 2
reload 2
reserve 2
xexec 1
TOTAL: 12 181

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 7 12444 4579 6030 1835 36%45:08:13
2newsfeed.endofthelinebbs.com 4 1337 73 1114 150 5%05:01:36
3news.sklaffkom.se 44 125 51 24 50 40%12:46:06
4localhost 25 0 0 0 0 0%00:00:00
5news.chimia.se 1 0 0 0 0 0%00:10:00
TOTAL: 5 81 13906 4703 7168 2035 33%63:05:55
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net12.9 MB0.0 KB5.6 MB18.4 MB 69%2.9 KB
2news.sklaffkom.se165.4 KB0.0 KB292.5 KB457.9 KB 36%4.5 KB
3newsfeed.endofthelinebbs.com149.0 KB0.0 KB1.1 MB1.2 MB 11%5.7 KB
4localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
5news.chimia.se0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 513.2 MB0.0 KB7.0 MB20.1 MB 65%3.1 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Jun 19 03:00:05 - 03:59:59 114 2.4% 0.03450.3 KB 3.2% 0.13
Jun 19 04:00:00 - 04:59:59 121 2.5% 0.03375.1 KB 2.7% 0.10
Jun 19 05:00:00 - 05:59:59 111 2.3% 0.03345.0 KB 2.5% 0.10
Jun 19 06:00:00 - 06:59:59 149 3.1% 0.04560.2 KB 4.0% 0.16
Jun 19 07:00:00 - 07:59:59 132 2.8% 0.04344.1 KB 2.5% 0.10
Jun 19 08:00:00 - 08:59:59 145 3.1% 0.04347.2 KB 2.5% 0.10
Jun 19 09:00:00 - 09:59:59 199 4.2% 0.06490.5 KB 3.5% 0.14
Jun 19 10:00:00 - 10:59:59 245 5.2% 0.07545.7 KB 3.9% 0.15
Jun 19 11:00:00 - 11:59:59 212 4.5% 0.06507.0 KB 3.7% 0.14
Jun 19 12:00:00 - 12:59:59 271 5.7% 0.08676.3 KB 4.9% 0.19
Jun 19 13:00:00 - 13:59:59 215 4.5% 0.06619.6 KB 4.5% 0.17
Jun 19 14:00:00 - 14:59:59 233 4.9% 0.06583.3 KB 4.2% 0.16
Jun 19 15:00:00 - 15:59:59 199 4.2% 0.06465.2 KB 3.4% 0.13
Jun 19 16:00:00 - 16:59:59 279 5.9% 0.08867.6 KB 6.3% 0.24
Jun 19 17:00:00 - 17:59:59 234 4.9% 0.07704.3 KB 5.1% 0.20
Jun 19 18:00:00 - 18:59:59 254 5.3% 0.07787.3 KB 5.7% 0.22
Jun 19 19:00:00 - 19:59:59 260 5.5% 0.07809.9 KB 5.8% 0.22
Jun 19 20:00:00 - 20:59:59 234 4.9% 0.07594.5 KB 4.3% 0.17
Jun 19 21:00:00 - 21:59:59 237 5.0% 0.07730.6 KB 5.3% 0.20
Jun 19 22:00:00 - 22:59:59 220 4.6% 0.06704.2 KB 5.1% 0.20
Jun 19 23:00:00 - 23:59:59 170 3.6% 0.05650.7 KB 4.7% 0.18
Jun 20 00:00:00 - 00:59:59 242 5.1% 0.07730.8 KB 5.3% 0.20
Jun 20 01:00:00 - 01:59:59 119 2.5% 0.03445.1 KB 3.2% 0.12
Jun 20 02:00:00 - 02:59:59 149 3.1% 0.04525.2 KB 3.8% 0.15
Jun 20 03:00:00 - 03:00:06 10 0.2% 1.679.9 KB 0.1% 1.65
TOTAL: 24:00:01 4754 100.0% 0.0613.5 MB 100.0% 0.16
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1twilightnode-out.news.weretis.net 1908 1331 0 0 0 0 0 0 577
2newsfeed.endofthelinebbs.com 184 78 0 0 0 0 0 0 106
3news.sklaffkom.se 49 49 0 0 0 0 0 0 0
TOTAL: 3 2141 1458 0 0 0 0 0 0 683

Unwanted newsgroups [Top 20]:

NewsgroupCount
fido7.ru.news 161
de.alt.talk.unmut 50
it.sport.calcio.milan 40
fido7.ru.military 37
de.test 28
lada.talk 27
linux.kernel.netdev 27
it.tlc.cellulari.android 25
uk.d-i-y 25
dk.politik 24
hfx.general 23
it.discussioni.misteri 22
eternal-september.talk 21
alt.food.fast-food 20
cn.comp 20
muc.lists.freebsd.bugs 20
linux.debian.kernel 19
de.alt.folklore.computer 18
fido7.ru.fidonet.today 18
alt.bestjobsusa.computer.jobs 17
TOTAL: 222 1458

Perl filter (innd) [Top 20]:

ReasonCount
EMP (phl) 307
EMP (phn path) 204
EMP (md5) 107
User-issued cancel 24
Too many newsgroups 3
HTML Multipart 1
TOTAL: 6 646

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 36
newsfeed.endofthelinebbs.com 1
TOTAL: 2 37
TOTAL: 1 37

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1chimia.se 4756 4754 0 0 0 0 99%23:59:49
2sklaffkom.se 5091 1101 2409 1238 0 1 21%23:59:49
3newsfeed.endofthelinebbs.com 1934 0 0 0 0 5565 0%16:56:44
4weretis.net 160 0 138 0 0 0 0%10:19:05
5sklaff.dev 0 0 0 0 0 4749 0%23:59:21
6thebunker.nu 0 0 0 0 0 4754 0%23:59:49
7usenet.blueworldhosting.com 0 0 0 0 0 4178 0%23:59:49
TOTAL: 7 11941 5855 2547 1238 0 19247 49%147:14:26
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1chimia.se13.6 MB0.0 KB13.6 MB0.2 KB/s2.9 KB23:59:49
2sklaffkom.se1.7 MB4.2 MB5.9 MB0.1 KB/s2.6 KB23:59:49
3newsfeed.endofthelinebbs.com0.0 KB0.0 KB0.0 KB0.0 KB/s016:56:44
4sklaff.dev0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:21
5thebunker.nu0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:49
6usenet.blueworldhosting.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:49
7weretis.net0.0 KB0.0 KB0.0 KB0.0 KB/s010:19:05
TOTAL: 715.3 MB4.2 MB19.5 MB0.0 KB/s2.8 KB147:14:26
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
166.234.152.36 1 11.3 KB 1 0 000:02:29
TOTAL: 1 1 11.3 KB 1 0 000:02:29

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 6 11.3 KB 1 0 000:02:31
2*.probe.onyphe.net 2 00.0 KB 0 0 000:00:04
3*.scanner.modat.io 2 00.0 KB 0 0 000:00:00
4*.stretchoid.com 2 00.0 KB 0 0 000:00:10
5*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:01
6*.census.shodan.io 1 00.0 KB 0 0 000:00:00
7*.internet-census.org 1 00.0 KB 0 0 000:00:10
TOTAL: 7 15 11.3 KB 1 0 000:02:57

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
66.234.152.36 0.009 0.030 0.00000:02:29
azpdcg88nrci.stretchoid.com 0.010 0.015 0.00000:00:10
sh-ams-nl-gp1-wk115a.internet-census.org 0.001 0.024 0.00000:00:10
jeremiah.probe.onyphe.net 0.004 0.004 0.00000:00:03
bean.probe.onyphe.net 0.005 0.014 0.00000:00:01
106.172.132.66.censys-scanner.com 0.025 0.026 0.00000:00:01
205.210.31.240 0.007 0.021 0.00000:00:00
195.140.214.26 0.003 0.014 0.00000:00:00
69.5.169.89 0.006 0.009 0.00000:00:00
81.19.216.103 0.004 0.016 0.00000:00:00
69.5.169.21 0.005 0.009 0.00000:00:00
o352.scanner.modat.io 0.006 0.027 0.00000:00:00
sky.census.shodan.io 0.007 0.014 0.00000:00:00
TOTAL: 13 0.092 0.223 0.00000:02:57

Curious NNRP explorers [Top 20]:

SystemConn
azpdcg88nrci.stretchoid.com 2
o352.scanner.modat.io 2
106.172.132.66.censys-scanner.com 1
195.140.214.26 1
205.210.31.240 1
69.5.169.21 1
69.5.169.89 1
81.19.216.103 1
bean.probe.onyphe.net 1
jeremiah.probe.onyphe.net 1
sh-ams-nl-gp1-wk115a.internet-census.org 1
sky.census.shodan.io 1
TOTAL: 12 14

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
69.5.169.89 6
bean.probe.onyphe.net 2
106.172.132.66.censys-scanner.com 1
66.234.152.36 1
azpdcg88nrci.stretchoid.com 1
TOTAL: 5 11

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
#026#003#003#002c#001 1
?$?,?r?s?#023#002#023#001?#024?#007?#022?#023?'?/?#024?(?0?`?a... 1
Accept-Encoding: gzip 1
Accept: */* 1
Connection: close 1
EHLO www.censys.io 1
GET / HTTP/1.1 1
Host: 172.234.115.63:119 1
MGLNDD_172.234.115.63_119 1
User-Agent: Mozilla/5.0 (compatible; Inf... 1
\list active *binar*\ 1
TOTAL: 11 11

NNRP client timeouts [Top 20]:

SystemConnPeer
69.5.169.21 1 1
69.5.169.89 1 1
TOTAL: 2 2 5

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1rec 1100.0%
TOTAL: 1 1100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1rec.food.cooking 1
TOTAL: 1 1
innreport from INN 2.7.3 based on initial work (©) 1996-2001 by Fabien Tassin <fta@sofaraway.org> and enhanced by several contributors since then