Daily Usenet report

Sep 5 03:00:04 -- Sep 6 03:00:02

Unknown entries from news log file:

First 50 / 102 lines (49.0%)

Sep 5 03:01:03 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Sep 5 05:58:55 twilightnode nnrpd[2805445]: Reading access from /usr/local/news/etc/readers.conf
Sep 5 05:58:55 twilightnode nnrpd[2805445]: Auth strategy 'localhost' does not match client. Removing.
Sep 5 05:58:55 twilightnode nnrpd[2805445]: 134.172.132.66.censys-scanner.com res <anonymous>
Sep 5 05:58:55 twilightnode nnrpd[2805445]: 134.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 5 05:58:55 twilightnode nnrpd[2805445]: 134.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 5 05:58:55 twilightnode nnrpd[2805445]: 134.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 5 05:58:55 twilightnode nnrpd[2805445]: 134.172.132.66.censys-scanner.com no_post anonymous-read
Sep 5 05:58:57 twilightnode nnrpd[2805445]: 134.172.132.66.censys-scanner.com res <anonymous>
Sep 5 05:58:57 twilightnode nnrpd[2805445]: 134.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 5 05:58:57 twilightnode nnrpd[2805445]: 134.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 5 05:58:57 twilightnode nnrpd[2805445]: 134.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 5 05:58:57 twilightnode nnrpd[2805445]: 134.172.132.66.censys-scanner.com no_post anonymous-read
Sep 5 06:13:36 twilightnode nnrpd[2806631]: Reading access from /usr/local/news/etc/readers.conf
Sep 5 06:13:36 twilightnode nnrpd[2806631]: Auth strategy 'localhost' does not match client. Removing.
Sep 5 06:13:36 twilightnode nnrpd[2806631]: prague.scan.bufferover.run res <anonymous>
Sep 5 06:13:36 twilightnode nnrpd[2806631]: prague.scan.bufferover.run no_match_user <anonymous> <localhost>
Sep 5 06:13:36 twilightnode nnrpd[2806631]: prague.scan.bufferover.run no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 5 06:13:36 twilightnode nnrpd[2806631]: prague.scan.bufferover.run match_user <anonymous> <anonymous>
Sep 5 06:13:36 twilightnode nnrpd[2806631]: prague.scan.bufferover.run no_post anonymous-read
Sep 5 06:13:37 twilightnode nnrpd[2806632]: Reading access from /usr/local/news/etc/readers.conf
Sep 5 06:13:37 twilightnode nnrpd[2806632]: Auth strategy 'localhost' does not match client. Removing.
Sep 5 06:13:37 twilightnode nnrpd[2806632]: prague.scan.bufferover.run res <anonymous>
Sep 5 06:13:37 twilightnode nnrpd[2806632]: prague.scan.bufferover.run no_match_user <anonymous> <localhost>
Sep 5 06:13:37 twilightnode nnrpd[2806632]: prague.scan.bufferover.run no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 5 06:13:37 twilightnode nnrpd[2806632]: prague.scan.bufferover.run match_user <anonymous> <anonymous>
Sep 5 06:13:37 twilightnode nnrpd[2806632]: prague.scan.bufferover.run no_post anonymous-read
Sep 5 07:10:07 twilightnode nnrpd[2816868]: Reading access from /usr/local/news/etc/readers.conf
Sep 5 07:10:07 twilightnode nnrpd[2816868]: Auth strategy 'localhost' does not match client. Removing.
Sep 5 07:10:07 twilightnode nnrpd[2816868]: 121.154.45.199.censys-scanner.com res <anonymous>
Sep 5 07:10:07 twilightnode nnrpd[2816868]: 121.154.45.199.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 5 07:10:07 twilightnode nnrpd[2816868]: 121.154.45.199.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 5 07:10:07 twilightnode nnrpd[2816868]: 121.154.45.199.censys-scanner.com match_user <anonymous> <anonymous>
Sep 5 07:10:07 twilightnode nnrpd[2816868]: 121.154.45.199.censys-scanner.com no_post anonymous-read
Sep 5 07:10:15 twilightnode nnrpd[2816870]: Reading access from /usr/local/news/etc/readers.conf
Sep 5 07:10:15 twilightnode nnrpd[2816870]: Auth strategy 'localhost' does not match client. Removing.
Sep 5 07:10:15 twilightnode nnrpd[2816870]: 121.154.45.199.censys-scanner.com res <anonymous>
Sep 5 07:10:15 twilightnode nnrpd[2816870]: 121.154.45.199.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 5 07:10:15 twilightnode nnrpd[2816870]: 121.154.45.199.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 5 07:10:15 twilightnode nnrpd[2816870]: 121.154.45.199.censys-scanner.com match_user <anonymous> <anonymous>
Sep 5 07:10:15 twilightnode nnrpd[2816870]: 121.154.45.199.censys-scanner.com no_post anonymous-read
Sep 5 07:10:23 twilightnode nnrpd[2816871]: Reading access from /usr/local/news/etc/readers.conf
Sep 5 07:10:23 twilightnode nnrpd[2816871]: Auth strategy 'localhost' does not match client. Removing.
Sep 5 07:10:23 twilightnode nnrpd[2816871]: 121.154.45.199.censys-scanner.com res <anonymous>
Sep 5 07:10:23 twilightnode nnrpd[2816871]: 121.154.45.199.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 5 07:10:23 twilightnode nnrpd[2816871]: 121.154.45.199.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 5 07:10:23 twilightnode nnrpd[2816871]: 121.154.45.199.censys-scanner.com match_user <anonymous> <anonymous>
Sep 5 07:10:23 twilightnode nnrpd[2816871]: 121.154.45.199.censys-scanner.com no_post anonymous-read
Sep 5 07:10:24 twilightnode nnrpd[2816871]: 121.154.45.199.censys-scanner.com res <anonymous>
Sep 5 07:10:24 twilightnode nnrpd[2816871]: 121.154.45.199.censys-scanner.com no_match_user <anonymous> <localhost>

Log entries by program:

Program nameLines%LinesSize%Size
inn 6656 52.2%1.2 MB 57.8%
innd 4654 36.5%651.1 KB 31.9%
innfeed 1264 9.9%192.2 KB 9.4%
nnrpd 168 1.3%17.6 KB 0.9%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 12743 100.0%2.0 MB100.0%

History cache:

ReasonCount%Count
Positive hits 18304 53.1%
Negative hits 9588 27.8%
Do not exist 6597 19.1%
Cache misses 3 0.0%
TOTAL: 4 34492 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.063 0.0%21 0.167 3.000 27.000
article cleanup00:00:00.070 0.0%6615 0.000 0.011 0.100
article logging00:00:00.198 0.0%6658 0.000 0.030 0.155
article parse00:00:00.130 0.0%8318 0.000 0.016 0.139
article write00:00:05.746 0.0%5397 0.524 1.065 2.900
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.169 0.0%35595 0.000 0.005 0.052
hisgrep/artcncl00:00:00.008 0.0%21 0.000 0.381 2.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:03.921 0.0%34585 0.052 0.113 0.218
history sync00:00:00.061 0.0%415 0.000 0.147 1.500
history write00:00:02.936 0.0%6615 0.167 0.444 0.870
idle24:00:26.879 99.9%36994 1299.716 2336.240 7066.776
nntp read00:00:00.708 0.0%35943 0.000 0.020 0.056
overview write00:00:03.831 0.0%5397 0.270 0.710 1.667
perl filter00:00:12.338 0.0%6615 0.966 1.865 6.276
python filter00:00:00.773 0.0%6615 0.000 0.117 0.773
site send00:00:00.260 0.0%10738 0.000 0.024 0.133
TOTAL: 1824:00:58.091100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.013 0.0%5580 0.000 0.002 0.077
article prepare00:00:00.011 0.0%23244 0.000 0.000 0.013
article read00:00:00.789 0.0%3630 0.000 0.217 1.250
backlog stats00:00:00.038 0.0%74121 0.000 0.001 0.005
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.515 0.0%40798 0.000 0.013 0.058
data write00:00:00.823 0.0%35578 0.000 0.023 0.066
idle23:59:51.016100.0%74121 426.575 1165.540 4505.239
status file00:00:00.104 0.0%169 0.000 0.615 3.000
TOTAL: 923:59:53.309100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:13.783100.0%25 2.000 551.320 1986.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.000 0.0%116 0.000 0.000 0.000
TOTAL: 300:00:13.783100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 4 10697 4175 6386 136 39%48:29:19
2usenet.blueworldhosting.com 714 6548 725 4842 981 11%23:48:03
3newsfeed.endofthelinebbs.com 1 6223 256 5820 147 4%30:22:40
4news.tebibyte.org 2 3909 91 3817 1 2%23:59:13
5news.sklaffkom.se 40 74 66 8 0 89%09:15:34
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 786 27451 5313 20873 1265 19%135:54:49
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net13.1 MB0.0 KB353.9 KB13.5 MB 97%3.2 KB
2usenet.blueworldhosting.com2.7 MB0.0 KB1.2 MB3.9 MB 69%2.3 KB
3newsfeed.endofthelinebbs.com2.4 MB0.0 KB231.3 KB2.6 MB 91%6.7 KB
4news.tebibyte.org342.1 KB0.0 KB4.1 KB346.2 KB 98%3.8 KB
5news.sklaffkom.se210.8 KB0.0 KB0.0 KB210.8 KB100%3.2 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 618.8 MB0.0 KB1.8 MB20.6 MB 91%3.2 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Sep 5 03:00:04 - 03:59:59 144 2.7% 0.04691.9 KB 3.7% 0.19
Sep 5 04:00:00 - 04:59:59 128 2.4% 0.04524.1 KB 2.8% 0.15
Sep 5 05:00:00 - 05:59:59 118 2.2% 0.03454.4 KB 2.4% 0.13
Sep 5 06:00:00 - 06:59:59 111 2.1% 0.03448.3 KB 2.4% 0.12
Sep 5 07:00:00 - 07:59:59 145 2.7% 0.04468.6 KB 2.5% 0.13
Sep 5 08:00:00 - 08:59:59 223 4.1% 0.06784.3 KB 4.2% 0.22
Sep 5 09:00:00 - 09:59:59 210 3.9% 0.06602.2 KB 3.2% 0.17
Sep 5 10:00:00 - 10:59:59 284 5.3% 0.08750.5 KB 4.0% 0.21
Sep 5 11:00:00 - 11:59:59 267 4.9% 0.07687.3 KB 3.7% 0.19
Sep 5 12:00:00 - 12:59:59 308 5.7% 0.09868.8 KB 4.7% 0.24
Sep 5 13:00:00 - 13:59:59 283 5.2% 0.08682.3 KB 3.7% 0.19
Sep 5 14:00:00 - 14:59:59 274 5.1% 0.08772.3 KB 4.2% 0.21
Sep 5 15:00:00 - 15:59:59 271 5.0% 0.08842.1 KB 4.5% 0.23
Sep 5 16:00:00 - 16:59:59 281 5.2% 0.081.0 MB 5.7% 0.29
Sep 5 17:00:00 - 17:59:59 288 5.3% 0.081.2 MB 6.7% 0.35
Sep 5 18:00:00 - 18:59:59 322 6.0% 0.091.1 MB 6.3% 0.33
Sep 5 19:00:00 - 19:59:59 240 4.4% 0.07774.2 KB 4.2% 0.22
Sep 5 20:00:00 - 20:59:59 270 5.0% 0.07856.4 KB 4.6% 0.24
Sep 5 21:00:00 - 21:59:59 265 4.9% 0.071.0 MB 5.7% 0.30
Sep 5 22:00:00 - 22:59:59 237 4.4% 0.07922.8 KB 5.0% 0.26
Sep 5 23:00:00 - 23:59:59 226 4.2% 0.06883.0 KB 4.7% 0.25
Sep 6 00:00:00 - 00:59:59 221 4.1% 0.061.0 MB 5.5% 0.29
Sep 6 01:00:00 - 01:59:59 145 2.7% 0.04545.3 KB 2.9% 0.15
Sep 6 02:00:00 - 02:59:59 128 2.4% 0.04444.9 KB 2.4% 0.12
Sep 6 03:00:00 - 03:00:02 6 0.1% 3.009.8 KB 0.1% 4.91
TOTAL: 23:59:58 5395 100.0% 0.0618.2 MB 100.0% 0.22
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 981 325 0 0 1 0 0 0 655
2twilightnode-out.news.weretis.net 172 4 0 0 0 0 0 0 168
3newsfeed.endofthelinebbs.com 107 11 0 0 0 0 0 0 96
4news.tebibyte.org 1 0 0 0 0 0 0 0 1
TOTAL: 4 1261 340 0 0 1 0 0 0 920

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 15
fido.ru.golded 12
fido.ru.fidonet.today 8
hispagatos.mastodon.tag.hacking 5
fido.8912.local 2
fido.aftershock 2
alt.anarchism.syndicalist 1
alt.bbs.files-announce 1
alt.sex.pedophilia 1
chmurka.statystyki 1
de.alt.technik.misc 1
fido.utf8.ftn.messaging 1
pl.soc.wegetarianizm 1
wny.general 1
TOTAL: 15 340

Supposedly-moderated groups with unmoderated postings [Top 20]:

GroupsCount
uk.religion.christian 1
TOTAL: 1 1

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 669
EMP (phn path) 86
Too many newsgroups 82
User-issued cancel 35
HTML Multipart 4
Too many newsgroups (meow) 1
TOTAL: 6 877

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 43
TOTAL: 1 43
TOTAL: 1 43

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 7066 2245 3059 27 8 25 31%23:59:54
2sklaffkom.se 5500 946 1833 2547 12 1 17%23:59:20
3newsfeed.endofthelinebbs.com 9698 22 5178 13 0 190 0%23:59:26
4weretis.net 1189 5 1115 0 0 0 0%23:44:00
5usenet.blueworldhosting.com 7420 0 4285 0 0 31 0%23:59:55
TOTAL: 5 30873 3218 15470 2587 20 247 10%119:42:35
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org5.8 MB197.6 KB6.0 MB0.1 KB/s2.7 KB23:59:54
2sklaffkom.se1.5 MB10.0 MB11.5 MB0.1 KB/s3.4 KB23:59:20
3newsfeed.endofthelinebbs.com72.7 KB39.1 KB111.8 KB0.0 KB/s3.2 KB23:59:26
4weretis.net42.1 KB0.0 KB42.1 KB0.0 KB/s8.4 KB23:44:00
5usenet.blueworldhosting.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:55
TOTAL: 57.4 MB10.2 MB17.6 MB0.0 KB/s3.1 KB119:42:35
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1121.154.45.199.censys-scanner.com 3 00.0 KB 0 0 000:00:06
274.235.188.75 2 00.0 KB 0 0 000:00:00
3prague.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
4134.172.132.66.censys-scanner.com 1 00.0 KB 0 0 000:00:02
5193-124-20-243.infrawat.ch 1 00.0 KB 0 0 000:00:00
6o021.scanner.modat.io 1 00.0 KB 0 0 000:00:00
7o034.scanner.modat.io 1 00.0 KB 0 0 000:00:00
8o040.scanner.modat.io 1 00.0 KB 0 0 000:00:00
9r4-236-ec.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 9 13 00.0 KB 0 0 000:00:13

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1*.199.censys-scanner.com 3 00.0 KB 0 0 000:00:06
2*.scanner.modat.io 3 00.0 KB 0 0 000:00:01
3*.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
4unresolved 2 00.0 KB 0 0 000:00:00
5*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:02
6*.infrawat.ch 1 00.0 KB 0 0 000:00:00
7*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 7 13 00.0 KB 0 0 000:00:13

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
121.154.45.199.censys-scanner.com 0.041 0.023 0.00000:00:06
134.172.132.66.censys-scanner.com 0.034 0.014 0.00000:00:02
r4-236-ec.monitoring.internet-measurement.com 0.007 0.011 0.00000:00:01
74.235.188.75 0.006 0.014 0.00000:00:00
prague.scan.bufferover.run 0.008 0.013 0.00000:00:00
o021.scanner.modat.io 0.005 0.006 0.00000:00:00
o034.scanner.modat.io 0.004 0.011 0.00000:00:00
o040.scanner.modat.io 0.006 0.011 0.00000:00:00
193-124-20-243.infrawat.ch 0.005 0.008 0.00000:00:00
TOTAL: 9 0.116 0.111 0.00000:00:13

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
prague.scan.bufferover.run 10
o021.scanner.modat.io 2
o034.scanner.modat.io 2
o040.scanner.modat.io 2
121.154.45.199.censys-scanner.com 1
134.172.132.66.censys-scanner.com 1
74.235.188.75 1
TOTAL: 7 19

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
FEAT 3
SYST 3
#001 2
#026#003#001#001 2
?#024 2
?$?(?#?' 2
EHLO www.censys.io 2
>?{?#033?y#006#?M?f?E?H?\ 1
MGLNDD_172.234.115.63_119 1
Z|o?B? -?#011?p#037?X:?[VT?j#013\?-#037... 1
TOTAL: 10 19

NNRP client timeouts [Top 20]:

SystemConnPeer
121.154.45.199.censys-scanner.com 1 2
TOTAL: 1 1 3