Daily Usenet report

Sep 4 03:00:03 -- Sep 5 03:00:03

Unknown entries from news log file:

First 50 / 69 lines (72.5%)

Sep 4 03:01:01 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Sep 4 05:29:05 twilightnode nnrpd[2736782]: Reading access from /usr/local/news/etc/readers.conf
Sep 4 05:29:05 twilightnode nnrpd[2736782]: Auth strategy 'localhost' does not match client. Removing.
Sep 4 05:29:05 twilightnode nnrpd[2736782]: 13.86.106.9 res <anonymous>
Sep 4 05:29:05 twilightnode nnrpd[2736782]: 13.86.106.9 no_match_user <anonymous> <localhost>
Sep 4 05:29:05 twilightnode nnrpd[2736782]: 13.86.106.9 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 4 05:29:05 twilightnode nnrpd[2736782]: 13.86.106.9 match_user <anonymous> <anonymous>
Sep 4 05:29:05 twilightnode nnrpd[2736782]: 13.86.106.9 no_post anonymous-read
Sep 4 05:29:06 twilightnode nnrpd[2736783]: Reading access from /usr/local/news/etc/readers.conf
Sep 4 05:29:06 twilightnode nnrpd[2736783]: Auth strategy 'localhost' does not match client. Removing.
Sep 4 05:29:06 twilightnode nnrpd[2736783]: 13.86.106.9 res <anonymous>
Sep 4 05:29:06 twilightnode nnrpd[2736783]: 13.86.106.9 no_match_user <anonymous> <localhost>
Sep 4 05:29:06 twilightnode nnrpd[2736783]: 13.86.106.9 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 4 05:29:06 twilightnode nnrpd[2736783]: 13.86.106.9 match_user <anonymous> <anonymous>
Sep 4 05:29:06 twilightnode nnrpd[2736783]: 13.86.106.9 no_post anonymous-read
Sep 4 15:21:10 twilightnode nnrpd[2764375]: Reading access from /usr/local/news/etc/readers.conf
Sep 4 15:21:10 twilightnode nnrpd[2764375]: Auth strategy 'localhost' does not match client. Removing.
Sep 4 15:21:10 twilightnode nnrpd[2764375]: 69-5-169-146.infrawat.ch res <anonymous>
Sep 4 15:21:10 twilightnode nnrpd[2764375]: 69-5-169-146.infrawat.ch no_match_user <anonymous> <localhost>
Sep 4 15:21:10 twilightnode nnrpd[2764375]: 69-5-169-146.infrawat.ch no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 4 15:21:10 twilightnode nnrpd[2764375]: 69-5-169-146.infrawat.ch match_user <anonymous> <anonymous>
Sep 4 15:21:10 twilightnode nnrpd[2764375]: 69-5-169-146.infrawat.ch no_post anonymous-read
Sep 4 15:21:11 twilightnode nnrpd[2764376]: Reading access from /usr/local/news/etc/readers.conf
Sep 4 15:21:11 twilightnode nnrpd[2764376]: Auth strategy 'localhost' does not match client. Removing.
Sep 4 15:21:11 twilightnode nnrpd[2764376]: 31-14-254-72.infrawat.ch res <anonymous>
Sep 4 15:21:11 twilightnode nnrpd[2764376]: 31-14-254-72.infrawat.ch no_match_user <anonymous> <localhost>
Sep 4 15:21:11 twilightnode nnrpd[2764376]: 31-14-254-72.infrawat.ch no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 4 15:21:11 twilightnode nnrpd[2764376]: 31-14-254-72.infrawat.ch match_user <anonymous> <anonymous>
Sep 4 15:21:11 twilightnode nnrpd[2764376]: 31-14-254-72.infrawat.ch no_post anonymous-read
Sep 4 16:36:42 twilightnode nnrpd[2767819]: Reading access from /usr/local/news/etc/readers.conf
Sep 4 16:36:42 twilightnode nnrpd[2767819]: Auth strategy 'localhost' does not match client. Removing.
Sep 4 16:36:42 twilightnode nnrpd[2767819]: lia.probe.onyphe.net res <anonymous>
Sep 4 16:36:42 twilightnode nnrpd[2767819]: lia.probe.onyphe.net no_match_user <anonymous> <localhost>
Sep 4 16:36:42 twilightnode nnrpd[2767819]: lia.probe.onyphe.net no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 4 16:36:42 twilightnode nnrpd[2767819]: lia.probe.onyphe.net match_user <anonymous> <anonymous>
Sep 4 16:36:42 twilightnode nnrpd[2767819]: lia.probe.onyphe.net no_post anonymous-read
Sep 4 16:36:43 twilightnode nnrpd[2767820]: Reading access from /usr/local/news/etc/readers.conf
Sep 4 16:36:43 twilightnode nnrpd[2767820]: Auth strategy 'localhost' does not match client. Removing.
Sep 4 16:36:43 twilightnode nnrpd[2767820]: farrell.probe.onyphe.net res <anonymous>
Sep 4 16:36:43 twilightnode nnrpd[2767820]: farrell.probe.onyphe.net no_match_user <anonymous> <localhost>
Sep 4 16:36:43 twilightnode nnrpd[2767820]: farrell.probe.onyphe.net no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 4 16:36:43 twilightnode nnrpd[2767820]: farrell.probe.onyphe.net match_user <anonymous> <anonymous>
Sep 4 16:36:43 twilightnode nnrpd[2767820]: farrell.probe.onyphe.net no_post anonymous-read
Sep 4 19:25:40 twilightnode nnrpd[2775559]: Reading access from /usr/local/news/etc/readers.conf
Sep 4 19:25:40 twilightnode nnrpd[2775559]: Auth strategy 'localhost' does not match client. Removing.
Sep 4 19:25:40 twilightnode nnrpd[2775559]: 147.185.132.63 res <anonymous>
Sep 4 19:25:40 twilightnode nnrpd[2775559]: 147.185.132.63 no_match_user <anonymous> <localhost>
Sep 4 19:25:40 twilightnode nnrpd[2775559]: 147.185.132.63 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 4 19:25:40 twilightnode nnrpd[2775559]: 147.185.132.63 match_user <anonymous> <anonymous>
Sep 4 19:25:40 twilightnode nnrpd[2775559]: 147.185.132.63 no_post anonymous-read

Log entries by program:

Program nameLines%LinesSize%Size
inn 8057 56.3%1.4 MB 61.7%
innd 4892 34.2%678.1 KB 29.4%
innfeed 1254 8.8%194.0 KB 8.4%
nnrpd 114 0.8%11.7 KB 0.5%
TOTAL: 4 14317 100.0%2.3 MB100.0%

History cache:

ReasonCount%Count
Positive hits 21097 51.8%
Negative hits 11623 28.5%
Do not exist 7974 19.6%
Cache misses 21 0.1%
TOTAL: 4 40715 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.088 0.0%20 0.111 4.400 27.000
article cleanup00:00:00.086 0.0%8006 0.000 0.011 0.071
article logging00:00:00.225 0.0%8068 0.000 0.028 0.207
article parse00:00:00.117 0.0%10775 0.000 0.011 0.062
article write00:00:06.285 0.0%6475 0.592 0.971 2.250
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.191 0.0%43223 0.000 0.004 0.043
hisgrep/artcncl00:00:00.005 0.0%20 0.000 0.250 2.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.130 0.0%40875 0.054 0.101 0.230
history sync00:00:00.041 0.0%414 0.000 0.099 0.667
history write00:00:03.399 0.0%8006 0.083 0.425 1.091
idle24:00:18.497 99.9%44128 969.279 1958.360 9233.031
nntp read00:00:00.839 0.0%43095 0.000 0.019 0.066
overview write00:00:04.004 0.0%6475 0.277 0.618 3.250
perl filter00:00:12.437 0.0%8006 0.889 1.553 5.765
python filter00:00:00.878 0.0%8006 0.000 0.110 0.571
site send00:00:00.316 0.0%12922 0.000 0.024 0.128
TOTAL: 1824:00:51.538100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.024 0.0%6735 0.000 0.004 0.062
article prepare00:00:00.007 0.0%28622 0.000 0.000 0.028
article read00:00:00.857 0.0%4523 0.033 0.189 0.800
backlog stats00:00:00.056 0.0%86094 0.000 0.001 0.005
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.545 0.0%48474 0.000 0.011 0.045
data write00:00:00.953 0.0%42090 0.000 0.023 0.062
idle23:49:52.706100.0%86094 386.648 996.500 4919.057
status file00:00:00.140 0.0%154 0.000 0.909 4.000
TOTAL: 923:49:55.288100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:10.030100.0%14 3.000 716.429 2997.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.000 0.0%43 0.000 0.000 0.000
TOTAL: 300:00:10.030100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 4 11508 4978 6490 40 43%46:25:55
2usenet.blueworldhosting.com 710 7919 1080 5510 1329 13%23:48:37
3newsfeed.endofthelinebbs.com 2 5290 282 4859 149 5%22:40:40
4news.sklaffkom.se 30 63 59 4 0 93%06:52:24
5news.tebibyte.org 1 3659 35 3623 1 0%23:59:54
6localhost 25 0 0 0 0 0%00:00:01
TOTAL: 6 772 28439 6434 20486 1519 22%123:47:31
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net16.1 MB0.0 KB89.6 KB16.2 MB 99%3.3 KB
2usenet.blueworldhosting.com5.4 MB0.0 KB1.9 MB7.3 MB 74%3.1 KB
3newsfeed.endofthelinebbs.com5.2 MB0.0 KB216.6 KB5.4 MB 96%12.8 KB
4news.sklaffkom.se157.3 KB0.0 KB0.0 KB157.3 KB100%2.7 KB
5news.tebibyte.org90.7 KB0.0 KB5.7 KB96.5 KB 94%2.7 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 627.0 MB0.0 KB2.2 MB29.2 MB 92%3.8 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Sep 4 03:00:03 - 03:59:59 100 1.5% 0.031.3 MB 5.2% 0.38
Sep 4 04:00:00 - 04:59:59 92 1.4% 0.031.3 MB 5.1% 0.38
Sep 4 05:00:00 - 05:59:59 116 1.8% 0.03632.0 KB 2.4% 0.18
Sep 4 06:00:00 - 06:59:59 152 2.4% 0.04789.2 KB 3.0% 0.22
Sep 4 07:00:00 - 07:59:59 182 2.8% 0.05624.9 KB 2.4% 0.17
Sep 4 08:00:00 - 08:59:59 266 4.1% 0.07801.4 KB 3.0% 0.22
Sep 4 09:00:00 - 09:59:59 305 4.7% 0.081.6 MB 6.0% 0.44
Sep 4 10:00:00 - 10:59:59 395 6.1% 0.111.6 MB 6.3% 0.46
Sep 4 11:00:00 - 11:59:59 327 5.1% 0.091.1 MB 4.4% 0.33
Sep 4 12:00:00 - 12:59:59 439 6.8% 0.121.5 MB 5.7% 0.42
Sep 4 13:00:00 - 13:59:59 385 6.0% 0.111.1 MB 4.3% 0.32
Sep 4 14:00:00 - 14:59:59 345 5.3% 0.101.1 MB 4.1% 0.30
Sep 4 15:00:00 - 15:59:59 326 5.0% 0.091.1 MB 4.2% 0.31
Sep 4 16:00:00 - 16:59:59 316 4.9% 0.091011.9 KB 3.8% 0.28
Sep 4 17:00:00 - 17:59:59 382 5.9% 0.111.1 MB 4.4% 0.32
Sep 4 18:00:00 - 18:59:59 352 5.4% 0.101.2 MB 4.6% 0.34
Sep 4 19:00:00 - 19:59:59 356 5.5% 0.101.3 MB 5.0% 0.37
Sep 4 20:00:00 - 20:59:59 320 5.0% 0.091.2 MB 4.5% 0.33
Sep 4 21:00:00 - 21:59:59 268 4.1% 0.071.1 MB 4.4% 0.32
Sep 4 22:00:00 - 22:59:59 233 3.6% 0.06745.9 KB 2.8% 0.21
Sep 4 23:00:00 - 23:59:59 237 3.7% 0.071.0 MB 4.0% 0.29
Sep 5 00:00:00 - 00:59:59 245 3.8% 0.071.3 MB 5.1% 0.38
Sep 5 01:00:00 - 01:59:59 204 3.2% 0.06953.6 KB 3.6% 0.26
Sep 5 02:00:00 - 02:59:59 112 1.7% 0.03414.0 KB 1.6% 0.11
Sep 5 03:00:00 - 03:00:03 9 0.1% 3.008.0 KB 0.0% 2.65
TOTAL: 24:00:00 6464 100.0% 0.0725.9 MB 100.0% 0.31
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1329 329 0 0 2 0 0 0 998
2newsfeed.endofthelinebbs.com 154 13 0 0 0 0 0 0 141
3twilightnode-out.news.weretis.net 109 5 0 0 0 0 0 0 104
4news.tebibyte.org 1 0 0 0 0 0 0 0 1
TOTAL: 4 1593 347 0 0 2 0 0 0 1244

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 21
fido.golded 10
fido.ru.fidonet.today 10
hispagatos.mastodon.tag.hacking 5
fido.ru.golded 3
pl.news.czytniki 3
de.comm.software.mailserver 2
0.alaskan-malamutes 1
alt.bbs.files-announce 1
alt.real-estate.commercial.ca-north 1
chmurka.statystyki 1
fido.aftershock 1
TOTAL: 13 347

Supposedly-moderated groups with unmoderated postings [Top 20]:

GroupsCount
uk.religion.christian 2
TOTAL: 1 2

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 1034
Too many newsgroups 93
EMP (phn path) 45
User-issued cancel 9
Too many newsgroups (meow) 1
TOTAL: 5 1182

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 62
TOTAL: 1 62
TOTAL: 1 62

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 8373 2581 3729 120 9 28 30%23:59:56
2sklaffkom.se 6541 1269 2014 3133 21 0 19%23:59:56
3newsfeed.endofthelinebbs.com 11404 47 6090 13 1 289 0%23:58:44
4weretis.net 1555 6 1482 0 0 0 0%23:46:49
5usenet.blueworldhosting.com 8508 0 5035 0 0 4 0%23:59:21
TOTAL: 5 36381 3903 18350 3266 31 321 10%119:44:46
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org6.3 MB1.5 MB7.9 MB0.1 KB/s3.0 KB23:59:56
2sklaffkom.se1.9 MB16.1 MB18.1 MB0.2 KB/s4.2 KB23:59:56
3newsfeed.endofthelinebbs.com131.1 KB28.0 KB159.0 KB0.0 KB/s2.7 KB23:58:44
4weretis.net15.7 KB0.0 KB15.7 KB0.0 KB/s2.6 KB23:46:49
5usenet.blueworldhosting.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:21
TOTAL: 58.4 MB17.7 MB26.1 MB0.1 KB/s3.7 KB119:44:46
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
113.86.106.9 2 00.0 KB 0 0 000:00:00
2147.185.132.63 1 00.0 KB 0 0 000:00:00
331-14-254-72.infrawat.ch 1 00.0 KB 0 0 000:00:00
469-5-169-146.infrawat.ch 1 00.0 KB 0 0 000:00:00
577.195.132.66.censys-scanner.com 1 00.0 KB 0 0 000:00:02
6farrell.probe.onyphe.net 1 00.0 KB 0 0 000:00:02
7lia.probe.onyphe.net 1 00.0 KB 0 0 000:00:00
8r5-241-f1.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 8 9 00.0 KB 0 0 000:00:10

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 3 00.0 KB 0 0 000:00:01
2*.infrawat.ch 2 00.0 KB 0 0 000:00:00
3*.probe.onyphe.net 2 00.0 KB 0 0 000:00:03
4*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:02
5*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 5 9 00.0 KB 0 0 000:00:10

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
farrell.probe.onyphe.net 0.005 0.006 0.00000:00:02
77.195.132.66.censys-scanner.com 0.026 0.017 0.00000:00:02
r5-241-f1.monitoring.internet-measurement.com 0.005 0.010 0.00000:00:01
lia.probe.onyphe.net 0.002 0.014 0.00000:00:00
13.86.106.9 0.007 0.022 0.00000:00:00
147.185.132.63 0.007 0.008 0.00000:00:00
31-14-254-72.infrawat.ch 0.012 0.016 0.00000:00:00
69-5-169-146.infrawat.ch 0.006 0.024 0.00000:00:00
TOTAL: 8 0.070 0.117 0.00000:00:10

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
31-14-254-72.infrawat.ch 6
lia.probe.onyphe.net 2
13.86.106.9 1
77.195.132.66.censys-scanner.com 1
TOTAL: 4 10

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
#026#003#003#002c#001 1
?$?,?r?s?#023#002#023#001?#024?#007?#022?#023?'?/?#024?(?0?`?a... 1
Accept-Encoding: gzip 1
Accept: */* 1
Connection: close 1
EHLO www.censys.io 1
GET / HTTP/1.1 1
Host: 172.234.115.63:119 1
MGLNDD_172.234.115.63_119 1
User-Agent: Mozilla/5.0 (compatible; Inf... 1
TOTAL: 10 10

NNRP client timeouts [Top 20]:

SystemConnPeer
31-14-254-72.infrawat.ch 1 1
TOTAL: 1 1 3