Daily Usenet report

Sep 10 03:00:03 -- Sep 11 03:00:03

Unknown entries from news log file:

First 50 / 88 lines (56.8%)

Sep 10 03:01:03 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Sep 10 06:13:18 twilightnode nnrpd[3159455]: Reading access from /usr/local/news/etc/readers.conf
Sep 10 06:13:18 twilightnode nnrpd[3159455]: Auth strategy 'localhost' does not match client. Removing.
Sep 10 06:13:18 twilightnode nnrpd[3159455]: o010.scanner.modat.io res <anonymous>
Sep 10 06:13:18 twilightnode nnrpd[3159455]: o010.scanner.modat.io no_match_user <anonymous> <localhost>
Sep 10 06:13:18 twilightnode nnrpd[3159455]: o010.scanner.modat.io no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 10 06:13:18 twilightnode nnrpd[3159455]: o010.scanner.modat.io match_user <anonymous> <anonymous>
Sep 10 06:13:18 twilightnode nnrpd[3159455]: o010.scanner.modat.io no_post anonymous-read
Sep 10 07:34:05 twilightnode nnrpd[3163753]: Reading access from /usr/local/news/etc/readers.conf
Sep 10 07:34:05 twilightnode nnrpd[3163753]: Auth strategy 'localhost' does not match client. Removing.
Sep 10 07:34:05 twilightnode nnrpd[3163753]: 99.195.132.66.censys-scanner.com res <anonymous>
Sep 10 07:34:05 twilightnode nnrpd[3163753]: 99.195.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 10 07:34:05 twilightnode nnrpd[3163753]: 99.195.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 10 07:34:05 twilightnode nnrpd[3163753]: 99.195.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 10 07:34:05 twilightnode nnrpd[3163753]: 99.195.132.66.censys-scanner.com no_post anonymous-read
Sep 10 07:34:07 twilightnode nnrpd[3163753]: 99.195.132.66.censys-scanner.com res <anonymous>
Sep 10 07:34:07 twilightnode nnrpd[3163753]: 99.195.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 10 07:34:07 twilightnode nnrpd[3163753]: 99.195.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 10 07:34:07 twilightnode nnrpd[3163753]: 99.195.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 10 07:34:07 twilightnode nnrpd[3163753]: 99.195.132.66.censys-scanner.com no_post anonymous-read
Sep 10 13:24:42 twilightnode nnrpd[3179523]: Reading access from /usr/local/news/etc/readers.conf
Sep 10 13:24:42 twilightnode nnrpd[3179523]: Auth strategy 'localhost' does not match client. Removing.
Sep 10 13:24:42 twilightnode nnrpd[3179523]: 212.77.178.125 res <anonymous>
Sep 10 13:24:42 twilightnode nnrpd[3179523]: 212.77.178.125 no_match_user <anonymous> <localhost>
Sep 10 13:24:42 twilightnode nnrpd[3179523]: 212.77.178.125 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 10 13:24:42 twilightnode nnrpd[3179523]: 212.77.178.125 match_user <anonymous> <anonymous>
Sep 10 13:24:42 twilightnode nnrpd[3179523]: 212.77.178.125 no_post anonymous-read
Sep 10 17:34:58 twilightnode nnrpd[3191040]: Reading access from /usr/local/news/etc/readers.conf
Sep 10 17:34:58 twilightnode nnrpd[3191040]: Auth strategy 'localhost' does not match client. Removing.
Sep 10 17:34:58 twilightnode nnrpd[3191040]: r5-119-77.monitoring.internet-measurement.com res <anonymous>
Sep 10 17:34:58 twilightnode nnrpd[3191040]: r5-119-77.monitoring.internet-measurement.com no_match_user <anonymous> <localhost>
Sep 10 17:34:58 twilightnode nnrpd[3191040]: r5-119-77.monitoring.internet-measurement.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 10 17:34:58 twilightnode nnrpd[3191040]: r5-119-77.monitoring.internet-measurement.com match_user <anonymous> <anonymous>
Sep 10 17:34:58 twilightnode nnrpd[3191040]: r5-119-77.monitoring.internet-measurement.com no_post anonymous-read
Sep 10 22:24:55 twilightnode nnrpd[3204441]: Reading access from /usr/local/news/etc/readers.conf
Sep 10 22:24:55 twilightnode nnrpd[3204441]: Auth strategy 'localhost' does not match client. Removing.
Sep 10 22:24:55 twilightnode nnrpd[3204441]: 198.235.24.67 res <anonymous>
Sep 10 22:24:55 twilightnode nnrpd[3204441]: 198.235.24.67 no_match_user <anonymous> <localhost>
Sep 10 22:24:55 twilightnode nnrpd[3204441]: 198.235.24.67 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 10 22:24:55 twilightnode nnrpd[3204441]: 198.235.24.67 match_user <anonymous> <anonymous>
Sep 10 22:24:55 twilightnode nnrpd[3204441]: 198.235.24.67 no_post anonymous-read
Sep 10 22:36:16 twilightnode nnrpd[3204988]: Reading access from /usr/local/news/etc/readers.conf
Sep 10 22:36:16 twilightnode nnrpd[3204988]: Auth strategy 'localhost' does not match client. Removing.
Sep 10 22:36:16 twilightnode nnrpd[3204988]: oskar.probe.onyphe.net res <anonymous>
Sep 10 22:36:16 twilightnode nnrpd[3204988]: oskar.probe.onyphe.net no_match_user <anonymous> <localhost>
Sep 10 22:36:16 twilightnode nnrpd[3204988]: oskar.probe.onyphe.net no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 10 22:36:16 twilightnode nnrpd[3204988]: oskar.probe.onyphe.net match_user <anonymous> <anonymous>
Sep 10 22:36:16 twilightnode nnrpd[3204988]: oskar.probe.onyphe.net no_post anonymous-read
Sep 10 22:36:17 twilightnode nnrpd[3204989]: Reading access from /usr/local/news/etc/readers.conf
Sep 10 22:36:17 twilightnode nnrpd[3204989]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 8702 58.7%1.5 MB 64.5%
innd 4712 31.8%657.0 KB 26.8%
innfeed 1274 8.6%197.4 KB 8.0%
nnrpd 139 0.9%15.5 KB 0.6%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 14828 100.0%2.4 MB100.0%

History cache:

ReasonCount%Count
Positive hits 21540 49.4%
Negative hits 13355 30.6%
Do not exist 8624 19.8%
Cache misses 70 0.2%
TOTAL: 4 43589 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.109 0.0%35 0.000 3.114 27.000
article cleanup00:00:00.111 0.0%8651 0.000 0.013 0.125
article logging00:00:00.308 0.0%8702 0.000 0.035 0.533
article parse00:00:00.234 0.0%28857 0.000 0.008 0.182
article write00:00:07.045 0.0%7376 0.472 0.955 5.800
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.280 0.0%65106 0.000 0.004 0.040
hisgrep/artcncl00:00:00.022 0.0%35 0.000 0.629 2.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.645 0.0%43637 0.052 0.106 0.338
history sync00:00:00.032 0.0%301 0.000 0.106 1.500
history write00:00:03.788 0.0%8635 0.133 0.439 1.278
idle23:59:33.360 99.9%61850 64.477 1396.497 15793.368
nntp read00:00:01.275 0.0%60901 0.000 0.021 0.071
overview write00:00:04.135 0.0%7376 0.151 0.561 2.000
perl filter00:00:15.543 0.0%8635 0.920 1.800 11.000
python filter00:00:00.986 0.0%8635 0.000 0.114 0.833
site send00:00:00.331 0.0%14729 0.000 0.022 0.079
TOTAL: 1824:00:12.204100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.025 0.0%8519 0.000 0.003 0.100
article prepare00:00:00.011 0.0%34350 0.000 0.000 0.013
article read00:00:01.163 0.0%5585 0.000 0.208 2.333
backlog stats00:00:00.051 0.0%91497 0.000 0.001 0.005
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.700 0.0%52874 0.000 0.013 0.040
data write00:00:01.196 0.0%45647 0.000 0.026 0.064
idle23:58:47.993100.0%91497 295.245 943.506 7540.075
status file00:00:00.219 0.0%169 0.000 1.296 7.000
TOTAL: 923:58:51.358100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:14.080100.0%19 171.000 741.053 3060.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.002 0.0%97 0.000 0.021 0.333
TOTAL: 300:00:14.082100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 4 14239 5002 9088 149 35%53:56:43
2usenet.blueworldhosting.com 711 8151 1463 5646 1042 17%23:54:28
3newsfeed.endofthelinebbs.com 2 5059 763 4160 136 15%22:13:58
4news.tebibyte.org 1 3285 161 3124 0 4%19:51:20
5news.sklaffkom.se 45 102 94 8 0 92%11:36:55
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 788 30836 7483 22026 1327 24%131:33:24
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1newsfeed.endofthelinebbs.com48.6 MB27.9 KB186.5 KB48.8 MB 99%55.5 KB
2twilightnode-out.news.weretis.net25.6 MB0.0 KB358.0 KB25.9 MB 98%5.2 KB
3usenet.blueworldhosting.com13.7 MB22.5 KB1.5 MB15.3 MB 89%6.2 KB
4news.tebibyte.org563.3 KB0.0 KB0.0 KB563.3 KB100%3.5 KB
5news.sklaffkom.se354.2 KB0.0 KB0.0 KB354.2 KB100%3.8 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 688.7 MB50.4 KB2.1 MB90.8 MB 97%10.6 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Sep 10 03:00:03 - 03:59:59 113 1.5% 0.03685.0 KB 0.8% 0.19
Sep 10 04:00:00 - 04:59:59 65 0.9% 0.02311.3 KB 0.3% 0.09
Sep 10 05:00:00 - 05:59:59 99 1.3% 0.03446.1 KB 0.5% 0.12
Sep 10 06:00:00 - 06:59:59 273 3.7% 0.0813.8 MB 15.6% 3.92
Sep 10 07:00:00 - 07:59:59 189 2.6% 0.05565.8 KB 0.6% 0.16
Sep 10 08:00:00 - 08:59:59 240 3.3% 0.07962.6 KB 1.1% 0.27
Sep 10 09:00:00 - 09:59:59 233 3.2% 0.06810.2 KB 0.9% 0.23
Sep 10 10:00:00 - 10:59:59 317 4.3% 0.091.1 MB 1.2% 0.30
Sep 10 11:00:00 - 11:59:59 313 4.2% 0.091.0 MB 1.2% 0.29
Sep 10 12:00:00 - 12:59:59 618 8.4% 0.1727.9 MB 31.5% 7.95
Sep 10 13:00:00 - 13:59:59 299 4.1% 0.081.1 MB 1.2% 0.30
Sep 10 14:00:00 - 14:59:59 284 3.9% 0.082.5 MB 2.9% 0.72
Sep 10 15:00:00 - 15:59:59 334 4.5% 0.091.2 MB 1.3% 0.33
Sep 10 16:00:00 - 16:59:59 309 4.2% 0.091.5 MB 1.7% 0.42
Sep 10 17:00:00 - 17:59:59 384 5.2% 0.115.2 MB 5.8% 1.47
Sep 10 18:00:00 - 18:59:59 330 4.5% 0.091.3 MB 1.5% 0.37
Sep 10 19:00:00 - 19:59:59 345 4.7% 0.101.3 MB 1.5% 0.37
Sep 10 20:00:00 - 20:59:59 361 4.9% 0.101.4 MB 1.6% 0.40
Sep 10 21:00:00 - 21:59:59 454 6.2% 0.135.1 MB 5.8% 1.46
Sep 10 22:00:00 - 22:59:59 746 10.1% 0.2111.4 MB 12.9% 3.24
Sep 10 23:00:00 - 23:59:59 479 6.5% 0.136.4 MB 7.2% 1.81
Sep 11 00:00:00 - 00:59:59 225 3.1% 0.061.1 MB 1.3% 0.32
Sep 11 01:00:00 - 01:59:59 195 2.6% 0.05919.1 KB 1.0% 0.26
Sep 11 02:00:00 - 02:59:59 161 2.2% 0.04722.1 KB 0.8% 0.20
Sep 11 03:00:00 - 03:00:03 10 0.1% 3.3339.6 KB 0.0% 13.21
TOTAL: 24:00:00 7376 100.0% 0.0988.6 MB 100.0% 1.05
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1042 316 0 4 0 0 0 0 722
2twilightnode-out.news.weretis.net 146 3 0 0 0 0 0 0 143
3newsfeed.endofthelinebbs.com 138 3 0 12 0 0 0 0 123
TOTAL: 3 1326 322 0 16 0 0 0 0 988

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 20
alt.sex.pedophilia 3
alt.2600.madrid 1
alt.asshole.binky 1
alt.bbs.files-announce 1
alt.genealogy 1
chmurka.statystyki 1
chmurka.test 1
de.comm.abuse 1
fido.ru.fidonet.today 1
fido.ru.space 1
fido.su.pol 1
microsoft.public.it.office.outlook 1
TOTAL: 14 322

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 763
Too many newsgroups 79
EMP (phn path) 69
User-issued cancel 23
Too many newsgroups (meow) 3
TOTAL: 5 937

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 51
TOTAL: 1 51
TOTAL: 1 51

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 9138 3032 4177 214 6 770 33%23:59:21
2sklaffkom.se 7463 927 2098 4309 19 0 12%23:59:57
3newsfeed.endofthelinebbs.com 11538 38 6469 61 0 321 0%23:59:53
4weretis.net 2529 5 2412 0 0 0 0%23:55:21
5usenet.blueworldhosting.com 8400 1 5219 0 0 8 0%23:59:57
TOTAL: 5 39068 4003 20375 4584 25 1099 10%119:54:29
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org23.8 MB2.2 MB26.0 MB0.3 KB/s8.2 KB23:59:21
2sklaffkom.se1.5 MB65.7 MB67.2 MB0.8 KB/s13.1 KB23:59:57
3newsfeed.endofthelinebbs.com143.3 KB241.5 KB384.9 KB0.0 KB/s3.9 KB23:59:53
4weretis.net17.8 KB0.0 KB17.8 KB0.0 KB/s3.6 KB23:55:21
5usenet.blueworldhosting.com3.0 KB0.0 KB3.0 KB0.0 KB/s3.0 KB23:59:57
TOTAL: 525.5 MB68.1 MB93.6 MB0.2 KB/s11.2 KB119:54:29
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
123.155.45.199.censys-scanner.com 3 00.0 KB 0 0 000:00:03
2198.235.24.67 1 00.0 KB 0 0 000:00:00
3212.77.178.125 1 00.0 KB 0 0 000:00:00
479.149.216.162.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
599.195.132.66.censys-scanner.com 1 00.0 KB 0 0 000:00:02
6mirko.probe.onyphe.net 1 00.0 KB 0 0 000:00:03
7o010.scanner.modat.io 1 00.0 KB 0 0 000:00:00
8oskar.probe.onyphe.net 1 00.0 KB 0 0 000:00:01
9r5-119-77.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 9 11 00.0 KB 0 0 000:00:14

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1*.199.censys-scanner.com 3 00.0 KB 0 0 000:00:03
2*.probe.onyphe.net 2 00.0 KB 0 0 000:00:04
3unresolved 2 00.0 KB 0 0 000:00:00
4*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:02
5*.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
6*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
7*.scanner.modat.io 1 00.0 KB 0 0 000:00:00
TOTAL: 7 11 00.0 KB 0 0 000:00:14

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
23.155.45.199.censys-scanner.com 0.036 0.032 0.00000:00:03
mirko.probe.onyphe.net 0.005 0.006 0.00000:00:03
99.195.132.66.censys-scanner.com 0.026 0.021 0.00000:00:02
r5-119-77.monitoring.internet-measurement.com 0.004 0.012 0.00000:00:01
oskar.probe.onyphe.net 0.004 0.018 0.00000:00:01
o010.scanner.modat.io 0.005 0.016 0.00000:00:00
198.235.24.67 0.004 0.013 0.00000:00:00
79.149.216.162.bc.googleusercontent.com 0.004 0.010 0.00000:00:00
212.77.178.125 0.006 0.013 0.00000:00:00
TOTAL: 9 0.094 0.141 0.00000:00:14

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
79.149.216.162.bc.googleusercontent.com 4
oskar.probe.onyphe.net 3
o010.scanner.modat.io 2
23.155.45.199.censys-scanner.com 1
99.195.132.66.censys-scanner.com 1
TOTAL: 5 11

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 2
#026#003#003#002c#001 1
?#021Oz?#022!#021?<?<?E?M?7?#031?#007"?b ?#004b?#036... 1
?$?,?r?s?#023#002#023#001?#024?#007?#022?#023?'?/?#024?(?0?`?a... 1
Accept-Encoding: gzip 1
FEAT 1
GET / HTTP/1.1 1
Host: 172.234.115.63:119 1
SYST 1
User-Agent: Hello from Palo Alto Network... 1
TOTAL: 10 11

NNRP client timeouts [Top 20]:

SystemConnPeer
23.155.45.199.censys-scanner.com 1 2
TOTAL: 1 1 3
innreport from INN 2.7.3 based on initial work (©) 1996-2001 by Fabien Tassin <fta@sofaraway.org> and enhanced by several contributors since then