Daily Usenet report: Aug 24 03:00:03

Unknown entries from news log file:

First 50 / 97 lines (51.5%)

Aug 24 03:01:01 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Aug 24 06:17:53 twilightnode nnrpd[2030739]: Reading access from /usr/local/news/etc/readers.conf
Aug 24 06:17:53 twilightnode nnrpd[2030739]: Auth strategy 'localhost' does not match client. Removing.
Aug 24 06:17:53 twilightnode nnrpd[2030739]: 43.98.196.112 res <anonymous>
Aug 24 06:17:53 twilightnode nnrpd[2030739]: 43.98.196.112 no_match_user <anonymous> <localhost>
Aug 24 06:17:53 twilightnode nnrpd[2030739]: 43.98.196.112 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 24 06:17:53 twilightnode nnrpd[2030739]: 43.98.196.112 match_user <anonymous> <anonymous>
Aug 24 06:17:53 twilightnode nnrpd[2030739]: 43.98.196.112 no_post anonymous-read
Aug 24 06:47:32 twilightnode nnrpd[2032626]: Reading access from /usr/local/news/etc/readers.conf
Aug 24 06:47:32 twilightnode nnrpd[2032626]: Auth strategy 'localhost' does not match client. Removing.
Aug 24 06:47:32 twilightnode nnrpd[2032626]: 217-146-80-126.infrawat.ch res <anonymous>
Aug 24 06:47:32 twilightnode nnrpd[2032626]: 217-146-80-126.infrawat.ch no_match_user <anonymous> <localhost>
Aug 24 06:47:32 twilightnode nnrpd[2032626]: 217-146-80-126.infrawat.ch no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 24 06:47:32 twilightnode nnrpd[2032626]: 217-146-80-126.infrawat.ch match_user <anonymous> <anonymous>
Aug 24 06:47:32 twilightnode nnrpd[2032626]: 217-146-80-126.infrawat.ch no_post anonymous-read
Aug 24 06:47:40 twilightnode nnrpd[2032627]: Reading access from /usr/local/news/etc/readers.conf
Aug 24 06:47:40 twilightnode nnrpd[2032627]: Auth strategy 'localhost' does not match client. Removing.
Aug 24 06:47:40 twilightnode nnrpd[2032627]: 31-14-254-105.infrawat.ch res <anonymous>
Aug 24 06:47:40 twilightnode nnrpd[2032627]: 31-14-254-105.infrawat.ch no_match_user <anonymous> <localhost>
Aug 24 06:47:40 twilightnode nnrpd[2032627]: 31-14-254-105.infrawat.ch no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 24 06:47:40 twilightnode nnrpd[2032627]: 31-14-254-105.infrawat.ch match_user <anonymous> <anonymous>
Aug 24 06:47:40 twilightnode nnrpd[2032627]: 31-14-254-105.infrawat.ch no_post anonymous-read
Aug 24 08:26:44 twilightnode nnrpd[2036768]: Reading access from /usr/local/news/etc/readers.conf
Aug 24 08:26:44 twilightnode nnrpd[2036768]: Auth strategy 'localhost' does not match client. Removing.
Aug 24 08:26:44 twilightnode nnrpd[2036768]: einstein.census.shodan.io res <anonymous>
Aug 24 08:26:44 twilightnode nnrpd[2036768]: einstein.census.shodan.io no_match_user <anonymous> <localhost>
Aug 24 08:26:44 twilightnode nnrpd[2036768]: einstein.census.shodan.io no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 24 08:26:44 twilightnode nnrpd[2036768]: einstein.census.shodan.io match_user <anonymous> <anonymous>
Aug 24 08:26:44 twilightnode nnrpd[2036768]: einstein.census.shodan.io no_post anonymous-read
Aug 24 09:31:28 twilightnode nnrpd[2039570]: Reading access from /usr/local/news/etc/readers.conf
Aug 24 09:31:28 twilightnode nnrpd[2039570]: Auth strategy 'localhost' does not match client. Removing.
Aug 24 09:31:28 twilightnode nnrpd[2039570]: 101.195.132.66.censys-scanner.com res <anonymous>
Aug 24 09:31:28 twilightnode nnrpd[2039570]: 101.195.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Aug 24 09:31:28 twilightnode nnrpd[2039570]: 101.195.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 24 09:31:28 twilightnode nnrpd[2039570]: 101.195.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Aug 24 09:31:28 twilightnode nnrpd[2039570]: 101.195.132.66.censys-scanner.com no_post anonymous-read
Aug 24 09:31:29 twilightnode nnrpd[2039570]: 101.195.132.66.censys-scanner.com res <anonymous>
Aug 24 09:31:29 twilightnode nnrpd[2039570]: 101.195.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Aug 24 09:31:29 twilightnode nnrpd[2039570]: 101.195.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 24 09:31:29 twilightnode nnrpd[2039570]: 101.195.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Aug 24 09:31:29 twilightnode nnrpd[2039570]: 101.195.132.66.censys-scanner.com no_post anonymous-read
Aug 24 15:23:25 twilightnode nnrpd[2054665]: Reading access from /usr/local/news/etc/readers.conf
Aug 24 15:23:25 twilightnode nnrpd[2054665]: Auth strategy 'localhost' does not match client. Removing.
Aug 24 15:23:25 twilightnode nnrpd[2054665]: laith.probe.onyphe.net res <anonymous>
Aug 24 15:23:25 twilightnode nnrpd[2054665]: laith.probe.onyphe.net no_match_user <anonymous> <localhost>
Aug 24 15:23:25 twilightnode nnrpd[2054665]: laith.probe.onyphe.net no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 24 15:23:25 twilightnode nnrpd[2054665]: laith.probe.onyphe.net match_user <anonymous> <anonymous>
Aug 24 15:23:25 twilightnode nnrpd[2054665]: laith.probe.onyphe.net no_post anonymous-read
Aug 24 15:23:30 twilightnode nnrpd[2054667]: Reading access from /usr/local/news/etc/readers.conf
Aug 24 15:23:30 twilightnode nnrpd[2054667]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program name	Lines	%Lines	Size	%Size
inn	7017	53.2%	1.2 MB	58.6%
innd	4746	36.0%	645.2 KB	30.5%
innfeed	1270	9.6%	212.7 KB	10.1%
nnrpd	158	1.2%	16.5 KB	0.8%
controlchan	1	0.0%	0.1 KB	0.0%
TOTAL: 5	13192	100.0%	2.1 MB	100.0%

History cache:

Reason	Count	%Count
Positive hits	19199	52.5%
Negative hits	10298	28.2%
Do not exist	6961	19.0%
Cache misses	115	0.3%
TOTAL: 4	36573	100.0%

innd timer:

Code region	Time	Pct	Invoked	Min(ms)	Avg(ms)	Max(ms)
article cancel	00:00:00.019	0.0%	15	0.167	1.267	11.000
article cleanup	00:00:00.065	0.0%	6982	0.000	0.009	0.057
article logging	00:00:00.177	0.0%	7017	0.000	0.025	0.136
article parse	00:00:00.111	0.0%	10681	0.000	0.010	0.091
article write	00:00:05.324	0.0%	5710	0.449	0.932	2.435
artlog/artparse	00:00:00.000	0.0%	1	0.000	0.000	0.000
data move	00:00:00.096	0.0%	39610	0.000	0.002	0.034
hisgrep/artcncl	00:00:00.004	0.0%	15	0.000	0.267	1.000
history grep	00:00:00.000	0.0%	0	0.000	0.000	0.000
history lookup	00:00:03.649	0.0%	36665	0.036	0.100	0.240
history sync	00:00:00.045	0.0%	418	0.000	0.108	1.000
history write	00:00:02.799	0.0%	6983	0.145	0.401	0.706
idle	24:00:37.075	100.0%	40877	553.371	2114.565	8581.400
nntp read	00:00:00.723	0.0%	39801	0.000	0.018	0.071
overview write	00:00:03.362	0.0%	5710	0.167	0.589	3.417
perl filter	00:00:09.551	0.0%	6982	0.579	1.368	11.091
python filter	00:00:00.493	0.0%	6982	0.000	0.071	0.591
site send	00:00:00.208	0.0%	11367	0.000	0.018	0.094
TOTAL: 18	24:01:03.701	100.0%	-	-	-	-

innfeed timer:

Code region	Time	Pct	Invoked	Min(ms)	Avg(ms)	Max(ms)
article new	00:00:00.013	0.0%	6071	0.000	0.002	0.056
article prepare	00:00:00.003	0.0%	24622	0.000	0.000	0.007
article read	00:00:00.907	0.0%	3744	0.000	0.242	1.600
backlog stats	00:00:00.036	0.0%	74099	0.000	0.000	0.005
callbacks	00:00:00.000	0.0%	0	0.000	0.000	0.000
data read	00:00:00.498	0.0%	42031	0.000	0.012	0.046
data write	00:00:00.856	0.0%	36428	0.000	0.023	0.060
idle	23:59:50.939	100.0%	74099	335.817	1165.885	4325.755
status file	00:00:00.141	0.0%	170	0.000	0.829	5.000
TOTAL: 9	23:59:53.393	100.0%	-	-	-	-

nnrpd timer:

Code region	Time	Pct	Invoked	Min(ms)	Avg(ms)	Max(ms)
idle	00:00:33.741	100.0%	20	70.500	1687.050	6797.000
newnews	00:00:00.000	0.0%	0	0.000	0.000	0.000
nntpwrite	00:00:00.000	0.0%	82	0.000	0.000	0.000
TOTAL: 3	00:00:33.741	100.0%	-	-	-	-

Control commands to innd:

Command	Number
flush	4
flushlogs	2
go	2
logmode	2
lowmark	1
mode	147
name	2
pause	2
paused	2
reload	2
reserve	2
TOTAL: 11	168

Incoming feeds (innd):

Server		Connects	Offered	Taken	Refused	Reject	%Accpt	Elapsed
1	twilightnode-out.news.weretis.net	3	12331	4294	7756	281	34%	52:17:13
2	usenet.blueworldhosting.com	720	6876	919	5076	881	13%	23:58:03
3	news.tebibyte.org	1	3484	427	3017	40	12%	25:53:46
4	newsfeed.endofthelinebbs.com	1	7412	257	6998	157	3%	35:50:37
5	news.sklaffkom.se	32	57	49	8	0	85%	06:45:55
6	localhost	25	0	0	0	0	0%	00:00:00
TOTAL: 6		782	30160	5946	22855	1359	19%	144:45:34

Incoming volume (innd):

Server		AcceptVol	DupVol	RejVol	TotalVol	%Acc	Vol/Art
1	twilightnode-out.news.weretis.net	13.3 MB	13.3 KB	1021.6 KB	14.3 MB	92%	3.2 KB
2	usenet.blueworldhosting.com	5.2 MB	0.0 KB	1.6 MB	6.8 MB	75%	3.9 KB
3	newsfeed.endofthelinebbs.com	4.8 MB	1.7 KB	405.2 KB	5.2 MB	92%	12.9 KB
4	news.tebibyte.org	1.3 MB	9.8 KB	1.9 MB	3.2 MB	40%	7.1 KB
5	news.sklaffkom.se	127.9 KB	0.0 KB	0.0 KB	127.9 KB	100%	2.6 KB
6	localhost	0.0 KB	0.0 KB	0.0 KB	0.0 KB	0%	0
TOTAL: 6		24.7 MB	24.8 KB	4.9 MB	29.7 MB	83%	4.2 KB

Incoming articles (innd):

Date	Articles	%Arts	Art/sec	Size	%Size	KB/sec
Aug 24 03:00:03 - 03:59:59	71	1.2%	0.02	249.8 KB	1.1%	0.07
Aug 24 04:00:00 - 04:59:59	102	1.8%	0.03	768.4 KB	3.3%	0.21
Aug 24 05:00:00 - 05:59:59	103	1.8%	0.03	429.9 KB	1.8%	0.12
Aug 24 06:00:00 - 06:59:59	126	2.2%	0.04	406.8 KB	1.7%	0.11
Aug 24 07:00:00 - 07:59:59	181	3.2%	0.05	516.5 KB	2.2%	0.14
Aug 24 08:00:00 - 08:59:59	235	4.1%	0.07	829.8 KB	3.5%	0.23
Aug 24 09:00:00 - 09:59:59	244	4.3%	0.07	669.1 KB	2.8%	0.19
Aug 24 10:00:00 - 10:59:59	304	5.3%	0.08	1.5 MB	6.6%	0.43
Aug 24 11:00:00 - 11:59:59	268	4.7%	0.07	831.8 KB	3.5%	0.23
Aug 24 12:00:00 - 12:59:59	249	4.4%	0.07	971.3 KB	4.1%	0.27
Aug 24 13:00:00 - 13:59:59	262	4.6%	0.07	797.6 KB	3.4%	0.22
Aug 24 14:00:00 - 14:59:59	303	5.3%	0.08	996.1 KB	4.2%	0.28
Aug 24 15:00:00 - 15:59:59	333	5.8%	0.09	1.2 MB	5.4%	0.35
Aug 24 16:00:00 - 16:59:59	316	5.5%	0.09	1.2 MB	5.2%	0.34
Aug 24 17:00:00 - 17:59:59	381	6.7%	0.11	1.7 MB	7.3%	0.48
Aug 24 18:00:00 - 18:59:59	305	5.3%	0.08	1.2 MB	5.3%	0.35
Aug 24 19:00:00 - 19:59:59	322	5.6%	0.09	1.1 MB	4.7%	0.31
Aug 24 20:00:00 - 20:59:59	347	6.1%	0.10	2.1 MB	9.1%	0.59
Aug 24 21:00:00 - 21:59:59	309	5.4%	0.09	1.9 MB	8.5%	0.55
Aug 24 22:00:00 - 22:59:59	257	4.5%	0.07	976.4 KB	4.2%	0.27
Aug 24 23:00:00 - 23:59:59	204	3.6%	0.06	780.8 KB	3.3%	0.22
Aug 25 00:00:00 - 00:59:59	186	3.3%	0.05	705.1 KB	3.0%	0.20
Aug 25 01:00:00 - 01:59:59	148	2.6%	0.04	688.9 KB	2.9%	0.19
Aug 25 02:00:00 - 02:59:59	144	2.5%	0.04	622.0 KB	2.6%	0.17
Aug 25 03:00:00 - 03:00:03	9	0.2%	3.00	8.1 KB	0.0%	2.70
TOTAL: 24:00:00	5709	100.0%	0.07	22.9 MB	100.0%	0.27

Sites sending bad articles:

Server		Total	Group	Other
1	usenet.blueworldhosting.com	881	318	563
2	twilightnode-out.news.weretis.net	313	5	308
3	newsfeed.endofthelinebbs.com	80	3	77
4	news.tebibyte.org	34	0	34
TOTAL: 4		1308	326	982

Unwanted newsgroups [Top 20]:

Newsgroup	Count
alt.test.ping	288
hispagatos.hacking.ransomware	16
fido.su.pol	5
hispagatos.mastodon.tag.hacking	5
chmurka.test	3
wolfsburg.test	3
fido.altyn.local	2
abg.witziges	1
alt.bbs.files-announce	1
chmurka.statystyki	1
pl.rec.kuchnia	1
TOTAL: 11	326

Perl filter (innd) [Top 20]:

Reason	Count
EMP (md5)	449
EMP (phl)	229
EMP (phn path)	129
Too many newsgroups	80
Binary: misplaced binary	31
User-issued cancel	15
HTML Multipart	7
EMP (phr path)	3
Too many newsgroups (meow)	3
TOTAL: 9	946

Miscellaneous innd statistics [Top 10]:

Event	Server	Number
Including strange strings
	twilightnode-out.news.weretis.net	35
	TOTAL: 1	35
No colon-space in header field
	usenet.blueworldhosting.com	1
	TOTAL: 1	1
TOTAL: 2		36

Outgoing feeds (innfeed) by articles:

Server		Offered	Taken	Refused	Reject	Miss	Spool	%Took	Elapsed
1	news.tebibyte.org	7052	2398	2957	96	205	27	34%	23:59:26
2	sklaffkom.se	5809	844	2026	2547	239	11	14%	23:59:34
3	newsfeed.endofthelinebbs.com	10245	31	5426	10	0	319	0%	23:59:17
4	weretis.net	1637	5	1568	0	1	0	0%	23:57:42
5	usenet.blueworldhosting.com	7126	2	4392	0	0	58	0%	23:59:25
TOTAL: 5		31869	3280	16369	2653	445	415	10%	119:55:24

Outgoing feeds (innfeed) by volume:

Server		AcceptVol	RejectVol	TotalVol	Volume/sec	Vol/Art	Elapsed
1	news.tebibyte.org	6.9 MB	458.0 KB	7.4 MB	0.1 KB/s	3.0 KB	23:59:26
2	sklaffkom.se	1.3 MB	11.8 MB	13.1 MB	0.2 KB/s	4.0 KB	23:59:34
3	newsfeed.endofthelinebbs.com	100.2 KB	27.1 KB	127.3 KB	0.0 KB/s	3.1 KB	23:59:17
4	weretis.net	8.3 KB	0.0 KB	8.3 KB	0.0 KB/s	1.7 KB	23:57:42
5	usenet.blueworldhosting.com	6.9 KB	0.0 KB	6.9 KB	0.0 KB/s	3.5 KB	23:59:25
TOTAL: 5		8.3 MB	12.3 MB	20.6 MB	0.0 KB/s	3.6 KB	119:55:24

NNRP readership statistics [Top 100]:

System		Conn	Elapsed
1	101.195.132.66.censys-scanner.com	1	00:00:02
2	205.210.31.162	1	00:00:00
3	217-146-80-126.infrawat.ch	1	00:00:00
4	31-14-254-105.infrawat.ch	1	00:00:00
5	43.98.196.112	1	00:00:05
6	69-5-169-146.infrawat.ch	1	00:00:00
7	69-5-169-9.infrawat.ch	1	00:00:00
8	einstein.census.shodan.io	1	00:00:00
9	laith.probe.onyphe.net	1	00:00:05
10	o007.scanner.modat.io	1	00:00:01
11	r3-65-41.monitoring.internet-measurement.com	1	00:00:01
12	r5-178-b2.monitoring.internet-measurement.com	1	00:00:01
13	shea.probe.onyphe.net	1	00:00:13
TOTAL: 13		13	00:00:33

NNRP connection statistics (by domain) [Top 100]:

System		Conn	Elapsed
1	*.infrawat.ch	4	00:00:00
2	*.monitoring.internet-measurement.com	2	00:00:03
3	*.probe.onyphe.net	2	00:00:18
4	unresolved	2	00:00:06
5	*.66.censys-scanner.com	1	00:00:02
6	*.census.shodan.io	1	00:00:00
7	*.scanner.modat.io	1	00:00:01
TOTAL: 7		13	00:00:33

NNRP total resource statistics [Top 20]:

System	User(ms)	System(ms)	Elapsed
shea.probe.onyphe.net	0.002	0.005	00:00:13
43.98.196.112	0.004	0.016	00:00:05
laith.probe.onyphe.net	0.004	0.009	00:00:05
101.195.132.66.censys-scanner.com	0.031	0.017	00:00:02
r5-178-b2.monitoring.internet-measurement.com	0.004	0.008	00:00:01
r3-65-41.monitoring.internet-measurement.com	0.006	0.013	00:00:01
o007.scanner.modat.io	0.006	0.003	00:00:01
einstein.census.shodan.io	0.003	0.013	00:00:00
31-14-254-105.infrawat.ch	0.002	0.006	00:00:00
69-5-169-146.infrawat.ch	0.004	0.010	00:00:00
205.210.31.162	0.004	0.011	00:00:00
69-5-169-9.infrawat.ch	0.003	0.004	00:00:00
217-146-80-126.infrawat.ch	0.003	0.016	00:00:00
TOTAL: 13	0.076	0.131	00:00:33

NNRP unrecognized commands (by host) [Top 20]:

System	Conn
shea.probe.onyphe.net	6
laith.probe.onyphe.net	2
101.195.132.66.censys-scanner.com	1
43.98.196.112	1
TOTAL: 4	10

NNRP unrecognized commands (by command) [Top 20]:

Command	Count
#026#003#003#002c#001	1
1787545072459875141	1
?$?,?r?s?#023#002#023#001?#024?#007?#022?#023?'?/?#024?(?0?`?a...	1
Accept-Language: en-US,en;q=0.5	1
Accept: text/html,application/xhtml+xml,...	1
Connection: close	1
EHLO www.censys.io	1
GET / HTTP/1.1	1
Host: 172.234.115.63:119	1
User-Agent: Mozilla/5.0 (X11; Ubuntu; Li...	1
TOTAL: 10	10

NNRP client timeouts [Top 20]:

System	Conn	Peer
31-14-254-105.infrawat.ch	1	1
69-5-169-9.infrawat.ch	1	1
TOTAL: 2	2	5

Daily Usenet report

Aug 24 03:00:03 -- Aug 25 03:00:03