Daily Usenet report

Aug 27 03:00:02 -- Aug 28 03:00:04

Unknown entries from news log file:

First 50 / 149 lines (33.6%)

Aug 27 03:00:43 twilightnode nnrpd[2212966]: Reading access from /usr/local/news/etc/readers.conf
Aug 27 03:00:43 twilightnode nnrpd[2212966]: Auth strategy 'localhost' does not match client. Removing.
Aug 27 03:00:43 twilightnode nnrpd[2212966]: 75.195.132.66.censys-scanner.com res <anonymous>
Aug 27 03:00:43 twilightnode nnrpd[2212966]: 75.195.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Aug 27 03:00:43 twilightnode nnrpd[2212966]: 75.195.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 27 03:00:43 twilightnode nnrpd[2212966]: 75.195.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Aug 27 03:00:43 twilightnode nnrpd[2212966]: 75.195.132.66.censys-scanner.com no_post anonymous-read
Aug 27 03:00:44 twilightnode nnrpd[2212966]: 75.195.132.66.censys-scanner.com res <anonymous>
Aug 27 03:00:44 twilightnode nnrpd[2212966]: 75.195.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Aug 27 03:00:44 twilightnode nnrpd[2212966]: 75.195.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 27 03:00:44 twilightnode nnrpd[2212966]: 75.195.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Aug 27 03:00:44 twilightnode nnrpd[2212966]: 75.195.132.66.censys-scanner.com no_post anonymous-read
Aug 27 03:00:56 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Aug 27 04:29:15 twilightnode nnrpd[2216542]: Reading access from /usr/local/news/etc/readers.conf
Aug 27 04:29:15 twilightnode nnrpd[2216542]: Auth strategy 'localhost' does not match client. Removing.
Aug 27 04:29:15 twilightnode nnrpd[2216542]: sfo2-37.boron.do.prod.binaryedge.ninja res <anonymous>
Aug 27 04:29:15 twilightnode nnrpd[2216542]: sfo2-37.boron.do.prod.binaryedge.ninja no_match_user <anonymous> <localhost>
Aug 27 04:29:15 twilightnode nnrpd[2216542]: sfo2-37.boron.do.prod.binaryedge.ninja no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 27 04:29:15 twilightnode nnrpd[2216542]: sfo2-37.boron.do.prod.binaryedge.ninja match_user <anonymous> <anonymous>
Aug 27 04:29:15 twilightnode nnrpd[2216542]: sfo2-37.boron.do.prod.binaryedge.ninja no_post anonymous-read
Aug 27 06:14:05 twilightnode nnrpd[2221579]: Reading access from /usr/local/news/etc/readers.conf
Aug 27 06:14:05 twilightnode nnrpd[2221579]: Auth strategy 'localhost' does not match client. Removing.
Aug 27 06:14:05 twilightnode nnrpd[2221579]: minsk.scan.bufferover.run res <anonymous>
Aug 27 06:14:05 twilightnode nnrpd[2221579]: minsk.scan.bufferover.run no_match_user <anonymous> <localhost>
Aug 27 06:14:05 twilightnode nnrpd[2221579]: minsk.scan.bufferover.run no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 27 06:14:05 twilightnode nnrpd[2221579]: minsk.scan.bufferover.run match_user <anonymous> <anonymous>
Aug 27 06:14:05 twilightnode nnrpd[2221579]: minsk.scan.bufferover.run no_post anonymous-read
Aug 27 06:14:05 twilightnode nnrpd[2221580]: Reading access from /usr/local/news/etc/readers.conf
Aug 27 06:14:05 twilightnode nnrpd[2221580]: Auth strategy 'localhost' does not match client. Removing.
Aug 27 06:14:05 twilightnode nnrpd[2221580]: minsk.scan.bufferover.run res <anonymous>
Aug 27 06:14:05 twilightnode nnrpd[2221580]: minsk.scan.bufferover.run no_match_user <anonymous> <localhost>
Aug 27 06:14:05 twilightnode nnrpd[2221580]: minsk.scan.bufferover.run no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 27 06:14:05 twilightnode nnrpd[2221580]: minsk.scan.bufferover.run match_user <anonymous> <anonymous>
Aug 27 06:14:05 twilightnode nnrpd[2221580]: minsk.scan.bufferover.run no_post anonymous-read
Aug 27 06:36:07 twilightnode nnrpd[2222506]: Reading access from /usr/local/news/etc/readers.conf
Aug 27 06:36:07 twilightnode nnrpd[2222506]: Auth strategy 'localhost' does not match client. Removing.
Aug 27 06:36:07 twilightnode nnrpd[2222506]: 40.76.232.91 res <anonymous>
Aug 27 06:36:07 twilightnode nnrpd[2222506]: 40.76.232.91 no_match_user <anonymous> <localhost>
Aug 27 06:36:07 twilightnode nnrpd[2222506]: 40.76.232.91 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 27 06:36:07 twilightnode nnrpd[2222506]: 40.76.232.91 match_user <anonymous> <anonymous>
Aug 27 06:36:07 twilightnode nnrpd[2222506]: 40.76.232.91 no_post anonymous-read
Aug 27 06:36:08 twilightnode nnrpd[2222507]: Reading access from /usr/local/news/etc/readers.conf
Aug 27 06:36:08 twilightnode nnrpd[2222507]: Auth strategy 'localhost' does not match client. Removing.
Aug 27 06:36:08 twilightnode nnrpd[2222507]: 40.76.232.91 res <anonymous>
Aug 27 06:36:08 twilightnode nnrpd[2222507]: 40.76.232.91 no_match_user <anonymous> <localhost>
Aug 27 06:36:08 twilightnode nnrpd[2222507]: 40.76.232.91 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Aug 27 06:36:08 twilightnode nnrpd[2222507]: 40.76.232.91 match_user <anonymous> <anonymous>
Aug 27 06:36:08 twilightnode nnrpd[2222507]: 40.76.232.91 no_post anonymous-read
Aug 27 07:33:58 twilightnode nnrpd[2226126]: Reading access from /usr/local/news/etc/readers.conf
Aug 27 07:33:58 twilightnode nnrpd[2226126]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 7004 52.5%1.2 MB 57.9%
innd 4829 36.2%675.4 KB 31.8%
innfeed 1267 9.5%193.8 KB 9.1%
nnrpd 241 1.8%26.0 KB 1.2%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 13342 100.0%2.1 MB100.0%

History cache:

ReasonCount%Count
Positive hits 19070 52.2%
Negative hits 10482 28.7%
Do not exist 6945 19.0%
Cache misses 14 0.0%
TOTAL: 4 36511 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.056 0.0%42 0.000 1.333 15.000
article cleanup00:00:00.061 0.0%6963 0.000 0.009 0.056
article logging00:00:00.196 0.0%6993 0.000 0.028 0.125
article parse00:00:00.137 0.0%8920 0.000 0.015 0.103
article write00:00:05.321 0.0%5617 0.424 0.947 2.333
artlog/artparse00:00:00.000 0.0%2 0.000 0.000 0.000
data move00:00:00.087 0.0%37837 0.000 0.002 0.026
hisgrep/artcncl00:00:00.024 0.0%42 0.000 0.571 1.250
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:03.300 0.0%36605 0.041 0.090 0.175
history sync00:00:00.051 0.0%410 0.000 0.124 1.000
history write00:00:02.675 0.0%6965 0.125 0.384 0.756
idle24:00:36.279100.0%39273 1102.528 2200.908 11123.630
nntp read00:00:00.704 0.0%38176 0.000 0.018 0.063
overview write00:00:03.385 0.0%5617 0.179 0.603 2.000
perl filter00:00:10.029 0.0%6963 0.714 1.440 4.426
python filter00:00:00.577 0.0%6963 0.000 0.083 0.259
site send00:00:00.234 0.0%11190 0.000 0.021 0.133
TOTAL: 1824:01:03.116100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.011 0.0%5836 0.000 0.002 0.077
article prepare00:00:00.003 0.0%25190 0.000 0.000 0.011
article read00:00:00.779 0.0%3739 0.000 0.208 1.500
backlog stats00:00:00.044 0.0%75913 0.000 0.001 0.009
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.541 0.0%42143 0.000 0.013 0.045
data write00:00:00.905 0.0%36633 0.000 0.025 0.070
idle23:58:22.000100.0%75913 411.873 1136.854 4196.014
status file00:00:00.139 0.0%169 0.000 0.822 4.000
TOTAL: 923:58:24.422100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:27.469100.0%32 2.500 858.406 3971.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.003 0.0%193 0.000 0.016 0.200
TOTAL: 300:00:27.472100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 146
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 167

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 3 10759 4251 6229 279 39%45:24:13
2usenet.blueworldhosting.com 717 6888 993 4935 960 14%23:42:10
3news.tebibyte.org 1 2802 180 2620 2 6%23:59:55
4newsfeed.endofthelinebbs.com 3 3749 122 3556 71 3%21:00:54
5news.sklaffkom.se 52 84 62 22 0 73%10:48:05
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 801 24282 5608 17362 1312 23%124:55:17
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net13.3 MB0.0 KB807.1 KB14.1 MB 94%3.2 KB
2usenet.blueworldhosting.com4.2 MB0.0 KB1.3 MB5.5 MB 77%2.9 KB
3newsfeed.endofthelinebbs.com993.1 KB0.0 KB125.4 KB1.1 MB 88%5.8 KB
4news.tebibyte.org464.7 KB0.0 KB3.1 KB467.8 KB 99%2.6 KB
5news.sklaffkom.se199.0 KB0.0 KB0.0 KB199.0 KB100%3.2 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 619.2 MB0.0 KB2.2 MB21.3 MB 89%3.2 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Aug 27 03:00:02 - 03:59:59 109 1.9% 0.03389.8 KB 1.9% 0.11
Aug 27 04:00:00 - 04:59:59 101 1.8% 0.03322.3 KB 1.6% 0.09
Aug 27 05:00:00 - 05:59:59 93 1.7% 0.03248.3 KB 1.2% 0.07
Aug 27 06:00:00 - 06:59:59 125 2.2% 0.03394.1 KB 2.0% 0.11
Aug 27 07:00:00 - 07:59:59 146 2.6% 0.04530.8 KB 2.6% 0.15
Aug 27 08:00:00 - 08:59:59 154 2.7% 0.04495.8 KB 2.5% 0.14
Aug 27 09:00:00 - 09:59:59 292 5.2% 0.08953.6 KB 4.7% 0.26
Aug 27 10:00:00 - 10:59:59 255 4.5% 0.07810.6 KB 4.0% 0.23
Aug 27 11:00:00 - 11:59:59 291 5.2% 0.08940.2 KB 4.7% 0.26
Aug 27 12:00:00 - 12:59:59 255 4.5% 0.07933.5 KB 4.6% 0.26
Aug 27 13:00:00 - 13:59:59 304 5.4% 0.08860.4 KB 4.3% 0.24
Aug 27 14:00:00 - 14:59:59 284 5.0% 0.08951.2 KB 4.7% 0.26
Aug 27 15:00:00 - 15:59:59 301 5.4% 0.08949.8 KB 4.7% 0.26
Aug 27 16:00:00 - 16:59:59 314 5.6% 0.091.2 MB 6.2% 0.35
Aug 27 17:00:00 - 17:59:59 337 6.0% 0.091.3 MB 6.5% 0.37
Aug 27 18:00:00 - 18:59:59 337 6.0% 0.091.3 MB 6.5% 0.36
Aug 27 19:00:00 - 19:59:59 294 5.2% 0.081006.6 KB 5.0% 0.28
Aug 27 20:00:00 - 20:59:59 279 5.0% 0.081.1 MB 5.6% 0.31
Aug 27 21:00:00 - 21:59:59 341 6.1% 0.091.2 MB 6.1% 0.34
Aug 27 22:00:00 - 22:59:59 242 4.3% 0.07763.1 KB 3.8% 0.21
Aug 27 23:00:00 - 23:59:59 255 4.5% 0.071.1 MB 5.6% 0.31
Aug 28 00:00:00 - 00:59:59 216 3.8% 0.061.0 MB 5.3% 0.30
Aug 28 01:00:00 - 01:59:59 168 3.0% 0.05697.5 KB 3.5% 0.19
Aug 28 02:00:00 - 02:59:59 123 2.2% 0.03497.1 KB 2.5% 0.14
Aug 28 03:00:00 - 03:00:04 9 0.2% 2.257.7 KB 0.0% 1.94
TOTAL: 24:00:02 5625 100.0% 0.0719.7 MB 100.0% 0.23
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 960 356 0 0 1 0 0 0 603
2twilightnode-out.news.weretis.net 338 7 0 0 0 0 0 0 331
3newsfeed.endofthelinebbs.com 81 9 0 0 0 0 0 0 72
TOTAL: 3 1379 372 0 0 1 0 0 0 1006

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 38
fido.ru.fidonet.today 12
hispagatos.mastodon.tag.hacking 8
local.general 5
spline.fli4l 4
fido.su.pol 3
alt.nl.bromfiets 2
hispagatos.mastodon.tag.hackers 2
kraft.talks 2
kraft.vehicles 2
wolfsburg.test 2
alt.bbs.files-announce 1
chmurka.statystyki 1
de.comm.technik.mobil 1
kraft.politics 1
TOTAL: 16 372

Supposedly-moderated groups with unmoderated postings [Top 20]:

GroupsCount
uk.religion.christian 1
TOTAL: 1 1

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 602
EMP (phn path) 289
Too many newsgroups 62
User-issued cancel 14
Too many newsgroups (meow) 4
HTML Multipart 3
TOTAL: 6 974

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 30
TOTAL: 1 30
TOTAL: 1 30

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 7040 2521 2910 104 41 14 35%23:59:51
2sklaffkom.se 5706 943 1936 2641 60 1 16%23:59:25
3newsfeed.endofthelinebbs.com 10228 27 5378 15 0 261 0%23:59:58
4weretis.net 1399 2 1343 1 0 0 0%23:44:58
5usenet.blueworldhosting.com 7185 1 4158 0 0 0 0%23:59:58
TOTAL: 5 31558 3494 15725 2761 101 276 11%119:44:10
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org7.3 MB502.4 KB7.8 MB0.1 KB/s3.0 KB23:59:51
2sklaffkom.se1.5 MB10.9 MB12.4 MB0.1 KB/s3.5 KB23:59:25
3newsfeed.endofthelinebbs.com76.7 KB47.5 KB124.2 KB0.0 KB/s3.0 KB23:59:58
4weretis.net4.5 KB1.3 KB5.8 KB0.0 KB/s1.9 KB23:44:58
5usenet.blueworldhosting.com2.4 KB0.0 KB2.4 KB0.0 KB/s2.4 KB23:59:58
TOTAL: 58.9 MB11.4 MB20.3 MB0.0 KB/s3.3 KB119:44:10
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
189.155.45.199.censys-scanner.com 3 00.0 KB 0 0 000:00:05
292.195.132.66.censys-scanner.com 3 00.0 KB 0 0 000:00:03
340.76.232.91 2 00.0 KB 0 0 000:00:00
4minsk.scan.bufferover.run 2 00.0 KB 0 0 000:00:01
5151.243.11.237 1 00.0 KB 0 0 000:00:03
6172-99-61-198.e55debe299579139e7cfe9be84b63964.ip.frontiernet.net 1 00.0 KB 0 0 000:00:00
7193-124-20-234.infrawat.ch 1 00.0 KB 0 0 000:00:00
8193-32-209-254.infrawat.ch 1 00.0 KB 0 0 000:00:00
936.255.97.14 1 00.0 KB 0 0 000:00:01
1075.195.132.66.censys-scanner.com 1 00.0 KB 0 0 000:00:01
11r3-113-71.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:02
12r5-112-70.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
13sfo2-37.boron.do.prod.binaryedge.ninja 1 00.0 KB 0 0 000:00:02
TOTAL: 13 19 00.0 KB 0 0 000:00:27

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1*.66.censys-scanner.com 4 00.0 KB 0 0 000:00:05
2unresolved 4 00.0 KB 0 0 000:00:06
3*.199.censys-scanner.com 3 00.0 KB 0 0 000:00:05
4*.infrawat.ch 2 00.0 KB 0 0 000:00:00
5*.monitoring.internet-measurement.com 2 00.0 KB 0 0 000:00:04
6*.scan.bufferover.run 2 00.0 KB 0 0 000:00:01
7*.ip.frontiernet.net 1 00.0 KB 0 0 000:00:00
8*.prod.binaryedge.ninja 1 00.0 KB 0 0 000:00:02
TOTAL: 8 19 00.0 KB 0 0 000:00:27

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
89.155.45.199.censys-scanner.com 0.032 0.029 0.00000:00:05
92.195.132.66.censys-scanner.com 0.035 0.032 0.00000:00:03
151.243.11.237 0.005 0.011 0.00000:00:03
r3-113-71.monitoring.internet-measurement.com 0.004 0.009 0.00000:00:02
sfo2-37.boron.do.prod.binaryedge.ninja 0.005 0.015 0.00000:00:02
r5-112-70.monitoring.internet-measurement.com 0.003 0.006 0.00000:00:01
75.195.132.66.censys-scanner.com 0.028 0.016 0.00000:00:01
36.255.97.14 0.005 0.007 0.00000:00:01
minsk.scan.bufferover.run 0.006 0.012 0.00000:00:01
40.76.232.91 0.008 0.015 0.00000:00:00
172-99-61-198.e55debe299579139e7cfe9be84b63964.ip.frontiernet.net 0.003 0.010 0.00000:00:00
193-32-209-254.infrawat.ch 0.003 0.005 0.00000:00:00
193-124-20-234.infrawat.ch 0.002 0.010 0.00000:00:00
TOTAL: 13 0.139 0.177 0.00000:00:27

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
minsk.scan.bufferover.run 9
36.255.97.14 6
40.76.232.91 1
75.195.132.66.censys-scanner.com 1
89.155.45.199.censys-scanner.com 1
92.195.132.66.censys-scanner.com 1
TOTAL: 6 19

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 3
#001 2
#026#003#001#001 2
?#024 2
?$?(?#?' 2
#026#003#001#005?#001 1
#030?#0301|?#031?Y?6?#007?h5r?lf?w?#004?+#027_?-?... 1
8#023?#005?E\s`L%#001?#010?+l?#030,?c?LX?*?Ib?#010?... 1
?#024#023#001#023#002#023#003#001 1
?u?#003?z?#022]"?#025?{d?Du?%VM?#022^?/?a?... 1
MGLNDD_172.234.115.63_119 1
W?)#002D?#010?E?a?O?St?- 1
t?#002K?O?3 1
TOTAL: 13 19

NNRP client timeouts [Top 20]:

SystemConnPeer
193-32-209-254.infrawat.ch 1 1
89.155.45.199.censys-scanner.com 1 2
92.195.132.66.censys-scanner.com 1 2
TOTAL: 3 3 6