Daily Usenet report

Sep 16 03:00:04 -- Sep 17 03:00:04

Unknown entries from news log file:

First 50 / 83 lines (60.2%)

Sep 16 03:01:12 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Sep 16 04:39:11 twilightnode nnrpd[3575697]: Reading access from /usr/local/news/etc/readers.conf
Sep 16 04:39:11 twilightnode nnrpd[3575697]: Auth strategy 'localhost' does not match client. Removing.
Sep 16 04:39:11 twilightnode nnrpd[3575697]: 97.172.132.66.censys-scanner.com res <anonymous>
Sep 16 04:39:11 twilightnode nnrpd[3575697]: 97.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 16 04:39:11 twilightnode nnrpd[3575697]: 97.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 16 04:39:11 twilightnode nnrpd[3575697]: 97.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 16 04:39:11 twilightnode nnrpd[3575697]: 97.172.132.66.censys-scanner.com no_post anonymous-read
Sep 16 04:39:18 twilightnode nnrpd[3575698]: Reading access from /usr/local/news/etc/readers.conf
Sep 16 04:39:18 twilightnode nnrpd[3575698]: Auth strategy 'localhost' does not match client. Removing.
Sep 16 04:39:18 twilightnode nnrpd[3575698]: 97.172.132.66.censys-scanner.com res <anonymous>
Sep 16 04:39:18 twilightnode nnrpd[3575698]: 97.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 16 04:39:18 twilightnode nnrpd[3575698]: 97.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 16 04:39:18 twilightnode nnrpd[3575698]: 97.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 16 04:39:18 twilightnode nnrpd[3575698]: 97.172.132.66.censys-scanner.com no_post anonymous-read
Sep 16 04:39:25 twilightnode nnrpd[3575699]: Reading access from /usr/local/news/etc/readers.conf
Sep 16 04:39:25 twilightnode nnrpd[3575699]: Auth strategy 'localhost' does not match client. Removing.
Sep 16 04:39:25 twilightnode nnrpd[3575699]: 97.172.132.66.censys-scanner.com res <anonymous>
Sep 16 04:39:25 twilightnode nnrpd[3575699]: 97.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 16 04:39:25 twilightnode nnrpd[3575699]: 97.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 16 04:39:25 twilightnode nnrpd[3575699]: 97.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 16 04:39:25 twilightnode nnrpd[3575699]: 97.172.132.66.censys-scanner.com no_post anonymous-read
Sep 16 04:39:29 twilightnode nnrpd[3575699]: 97.172.132.66.censys-scanner.com res <anonymous>
Sep 16 04:39:29 twilightnode nnrpd[3575699]: 97.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 16 04:39:29 twilightnode nnrpd[3575699]: 97.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 16 04:39:29 twilightnode nnrpd[3575699]: 97.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 16 04:39:29 twilightnode nnrpd[3575699]: 97.172.132.66.censys-scanner.com no_post anonymous-read
Sep 16 09:32:37 twilightnode nnrpd[3589191]: Reading access from /usr/local/news/etc/readers.conf
Sep 16 09:32:37 twilightnode nnrpd[3589191]: Auth strategy 'localhost' does not match client. Removing.
Sep 16 09:32:37 twilightnode nnrpd[3589191]: 195-206-182-214.infrawat.ch res <anonymous>
Sep 16 09:32:37 twilightnode nnrpd[3589191]: 195-206-182-214.infrawat.ch no_match_user <anonymous> <localhost>
Sep 16 09:32:37 twilightnode nnrpd[3589191]: 195-206-182-214.infrawat.ch no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 16 09:32:37 twilightnode nnrpd[3589191]: 195-206-182-214.infrawat.ch match_user <anonymous> <anonymous>
Sep 16 09:32:37 twilightnode nnrpd[3589191]: 195-206-182-214.infrawat.ch no_post anonymous-read
Sep 16 09:32:46 twilightnode nnrpd[3589192]: Reading access from /usr/local/news/etc/readers.conf
Sep 16 09:32:46 twilightnode nnrpd[3589192]: Auth strategy 'localhost' does not match client. Removing.
Sep 16 09:32:46 twilightnode nnrpd[3589192]: 69-5-169-118.infrawat.ch res <anonymous>
Sep 16 09:32:46 twilightnode nnrpd[3589192]: 69-5-169-118.infrawat.ch no_match_user <anonymous> <localhost>
Sep 16 09:32:46 twilightnode nnrpd[3589192]: 69-5-169-118.infrawat.ch no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 16 09:32:46 twilightnode nnrpd[3589192]: 69-5-169-118.infrawat.ch match_user <anonymous> <anonymous>
Sep 16 09:32:46 twilightnode nnrpd[3589192]: 69-5-169-118.infrawat.ch no_post anonymous-read
Sep 16 21:19:22 twilightnode nnrpd[3621034]: Reading access from /usr/local/news/etc/readers.conf
Sep 16 21:19:22 twilightnode nnrpd[3621034]: Auth strategy 'localhost' does not match client. Removing.
Sep 16 21:19:22 twilightnode nnrpd[3621034]: azpdssowtvnp.stretchoid.com res <anonymous>
Sep 16 21:19:22 twilightnode nnrpd[3621034]: azpdssowtvnp.stretchoid.com no_match_user <anonymous> <localhost>
Sep 16 21:19:22 twilightnode nnrpd[3621034]: azpdssowtvnp.stretchoid.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 16 21:19:22 twilightnode nnrpd[3621034]: azpdssowtvnp.stretchoid.com match_user <anonymous> <anonymous>
Sep 16 21:19:22 twilightnode nnrpd[3621034]: azpdssowtvnp.stretchoid.com no_post anonymous-read
Sep 16 21:19:32 twilightnode nnrpd[3621035]: Reading access from /usr/local/news/etc/readers.conf
Sep 16 21:19:32 twilightnode nnrpd[3621035]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 26445 81.6%5.2 MB 86.0%
innd 4582 14.1%644.0 KB 10.4%
innfeed 1247 3.8%209.8 KB 3.4%
nnrpd 131 0.4%14.5 KB 0.2%
TOTAL: 4 32405 100.0%6.0 MB100.0%

History cache:

ReasonCount%Count
Positive hits 63463 43.2%
Negative hits 57007 38.8%
Do not exist 26339 17.9%
Cache misses 48 0.0%
TOTAL: 4 146857 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.057 0.0%29 0.167 1.966 5.000
article cleanup00:00:00.187 0.0%26523 0.000 0.007 0.061
article logging00:00:00.726 0.0%26578 0.000 0.027 0.133
article parse00:00:00.588 0.0%60605 0.000 0.010 0.056
article write00:00:19.303 0.0%25367 0.401 0.761 3.251
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.488 0.0%159624 0.000 0.003 0.031
hisgrep/artcncl00:00:00.031 0.0%29 0.000 1.069 1.636
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:16.373 0.0%147982 0.050 0.111 0.970
history sync00:00:00.028 0.0%322 0.000 0.087 0.500
history write00:00:10.448 0.0%26523 0.218 0.394 1.466
idle23:58:43.856 99.9%150146 336.654 574.933 3750.512
nntp read00:00:02.546 0.0%149510 0.000 0.017 0.053
overview write00:00:07.184 0.0%25367 0.057 0.283 8.897
perl filter00:00:29.999 0.0%26523 0.858 1.131 3.576
python filter00:00:01.920 0.0%26523 0.000 0.072 0.345
site send00:00:01.149 0.0%50701 0.000 0.023 0.074
TOTAL: 1824:00:14.883100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.078 0.0%27051 0.000 0.003 0.040
article prepare00:00:00.014 0.0%148964 0.000 0.000 0.005
article read00:00:01.982 0.0%21056 0.019 0.094 0.452
backlog stats00:00:00.129 0.0%261643 0.000 0.000 0.004
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:01.795 0.0%168750 0.000 0.011 0.034
data write00:00:03.080 0.0%147180 0.000 0.021 0.052
idle23:58:54.424100.0%261643 149.827 329.970 1931.904
status file00:00:00.128 0.0%158 0.000 0.810 12.000
TOTAL: 923:59:01.630100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:25.601100.0%17 77.000 1505.941 10558.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.000 0.0%98 0.000 0.000 0.000
TOTAL: 300:00:25.601100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 6 48201 14037 34111 53 29%41:05:55
2usenet.blueworldhosting.com 721 26373 10229 15170 974 38%23:46:20
3news.tebibyte.org 1 11167 592 10575 0 5%28:19:47
4newsfeed.endofthelinebbs.com 2 4202 236 3866 100 5%19:33:23
5news.sklaffkom.se 31 82 70 12 0 85%09:10:18
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 786 90025 25164 63734 1127 27%121:55:43
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net119.2 MB0.0 KB169.7 KB119.4 MB 99%8.7 KB
2usenet.blueworldhosting.com96.6 MB0.0 KB1.2 MB97.8 MB 98%8.9 KB
3newsfeed.endofthelinebbs.com2.3 MB0.0 KB150.8 KB2.4 MB 93%7.3 KB
4news.tebibyte.org1.8 MB0.0 KB0.0 KB1.8 MB100%3.2 KB
5news.sklaffkom.se228.7 KB0.0 KB0.0 KB228.7 KB100%3.3 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 6220.1 MB0.0 KB1.5 MB221.6 MB 99%8.6 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Sep 16 03:00:04 - 03:59:59 1342 5.3% 0.3713.2 MB 6.0% 3.77
Sep 16 04:00:00 - 04:59:59 1323 5.2% 0.3713.0 MB 5.9% 3.70
Sep 16 05:00:00 - 05:59:59 1176 4.7% 0.3311.6 MB 5.3% 3.29
Sep 16 06:00:00 - 06:59:59 1372 5.4% 0.3813.3 MB 6.1% 3.78
Sep 16 07:00:00 - 07:59:59 1370 5.4% 0.3813.0 MB 5.9% 3.71
Sep 16 08:00:00 - 08:59:59 1466 5.8% 0.4114.0 MB 6.4% 3.98
Sep 16 09:00:00 - 09:59:59 1472 5.8% 0.4113.3 MB 6.1% 3.78
Sep 16 10:00:00 - 10:59:59 1596 6.3% 0.4413.9 MB 6.3% 3.95
Sep 16 11:00:00 - 11:59:59 1526 6.0% 0.4213.7 MB 6.2% 3.89
Sep 16 12:00:00 - 12:59:59 1509 6.0% 0.4213.7 MB 6.3% 3.91
Sep 16 13:00:00 - 13:59:59 1532 6.1% 0.4313.8 MB 6.3% 3.94
Sep 16 14:00:00 - 14:59:59 1586 6.3% 0.4414.3 MB 6.5% 4.06
Sep 16 15:00:00 - 15:59:59 1652 6.5% 0.4614.1 MB 6.4% 4.01
Sep 16 16:00:00 - 16:59:59 1506 6.0% 0.4213.0 MB 5.9% 3.70
Sep 16 17:00:00 - 17:59:59 1642 6.5% 0.4614.1 MB 6.4% 4.02
Sep 16 18:00:00 - 18:59:59 829 3.3% 0.236.5 MB 3.0% 1.85
Sep 16 19:00:00 - 19:59:59 299 1.2% 0.081.5 MB 0.7% 0.43
Sep 16 20:00:00 - 20:59:59 351 1.4% 0.101.4 MB 0.6% 0.40
Sep 16 21:00:00 - 21:59:59 347 1.4% 0.101.5 MB 0.7% 0.41
Sep 16 22:00:00 - 22:59:59 326 1.3% 0.091.3 MB 0.6% 0.38
Sep 16 23:00:00 - 23:59:59 314 1.2% 0.091.6 MB 0.7% 0.46
Sep 17 00:00:00 - 00:59:59 272 1.1% 0.081.4 MB 0.6% 0.40
Sep 17 01:00:00 - 01:59:59 192 0.8% 0.051.2 MB 0.5% 0.33
Sep 17 02:00:00 - 02:59:59 222 0.9% 0.061004.1 KB 0.4% 0.28
Sep 17 03:00:00 - 03:00:04 12 0.0% 3.0018.6 KB 0.0% 4.65
TOTAL: 24:00:00 25234 100.0% 0.29219.5 MB 100.0% 2.60
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 974 335 0 0 0 0 0 0 639
2newsfeed.endofthelinebbs.com 127 10 0 0 0 0 0 0 117
3twilightnode-out.news.weretis.net 110 13 0 0 0 0 0 0 97
TOTAL: 3 1211 358 0 0 0 0 0 0 853

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 14
fido.ru.golded 11
hispagatos.mastodon.tag.hacking 10
fido.ru.fidonet.today 6
fido.pushkin.local 5
pl.listserv.chomor-l 5
alt.test.two 2
alt.uu.misc 2
hispagatos.mastodon.tag.hackers 2
S.E.D 1
alt.2600.madrid 1
alt.bbs.files-announce 1
alt.fucknozzles 1
alt.non.sequitur 1
chmurka.statystyki 1
de.comm.software.mailreader 1
de.comp.lang.python 1
fido.english_tutor 1
fido.ru.home 1
TOTAL: 23 358

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 642
Too many newsgroups 119
EMP (phn path) 18
User-issued cancel 14
HTML Multipart 5
TOTAL: 5 798

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 55
TOTAL: 1 55
TOTAL: 1 55

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 29938 16151 8910 145 0 42 53%23:59:56
2sklaffkom.se 25530 1035 4316 19851 0 0 4%23:59:29
3newsfeed.endofthelinebbs.com 33253 43 24839 26 0 1783 0%23:59:56
4weretis.net 11232 6 11064 1 0 0 0%23:59:56
5usenet.blueworldhosting.com 13850 3 10309 0 0 29 0%23:59:10
TOTAL: 5 113803 17238 59438 20023 0 1854 15%119:58:27
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org157.7 MB985.5 KB158.7 MB1.9 KB/s10.0 KB23:59:56
2sklaffkom.se1.6 MB199.9 MB201.6 MB2.4 KB/s9.9 KB23:59:29
3newsfeed.endofthelinebbs.com117.8 KB222.8 KB340.6 KB0.0 KB/s4.9 KB23:59:56
4weretis.net53.1 KB1.2 KB54.2 KB0.0 KB/s7.7 KB23:59:56
5usenet.blueworldhosting.com11.1 KB0.0 KB11.1 KB0.0 KB/s3.7 KB23:59:10
TOTAL: 5159.5 MB201.1 MB360.6 MB0.9 KB/s9.9 KB119:58:27
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
197.172.132.66.censys-scanner.com 3 00.0 KB 0 0 000:00:09
2azpdssowtvnp.stretchoid.com 2 00.0 KB 0 0 000:00:10
3138.210.203.35.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
4195-206-182-214.infrawat.ch 1 00.0 KB 0 0 000:00:00
569-5-169-118.infrawat.ch 1 00.0 KB 0 0 000:00:00
6o024.scanner.modat.io 1 00.0 KB 0 0 000:00:00
7r3-234-ea.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
8r5-236-ec.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 8 11 00.0 KB 0 0 000:00:25

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1*.66.censys-scanner.com 3 00.0 KB 0 0 000:00:09
2*.infrawat.ch 2 00.0 KB 0 0 000:00:00
3*.monitoring.internet-measurement.com 2 00.0 KB 0 0 000:00:03
4*.stretchoid.com 2 00.0 KB 0 0 000:00:10
5*.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
6*.scanner.modat.io 1 00.0 KB 0 0 000:00:00
TOTAL: 6 11 00.0 KB 0 0 000:00:25

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
azpdssowtvnp.stretchoid.com 0.014 0.030 0.00000:00:10
97.172.132.66.censys-scanner.com 0.040 0.029 0.00000:00:09
r3-234-ea.monitoring.internet-measurement.com 0.005 0.007 0.00000:00:01
r5-236-ec.monitoring.internet-measurement.com 0.010 0.012 0.00000:00:01
69-5-169-118.infrawat.ch 0.006 0.008 0.00000:00:00
195-206-182-214.infrawat.ch 0.006 0.008 0.00000:00:00
o024.scanner.modat.io 0.006 0.011 0.00000:00:00
138.210.203.35.bc.googleusercontent.com 0.004 0.014 0.00000:00:00
TOTAL: 8 0.091 0.119 0.00000:00:25

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
138.210.203.35.bc.googleusercontent.com 4
97.172.132.66.censys-scanner.com 1
azpdssowtvnp.stretchoid.com 1
TOTAL: 3 6

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
Accept-Encoding: gzip 1
EHLO www.censys.io 1
GET / HTTP/1.1 1
Host: 172.234.115.63:119 1
MGLNDD_172.234.115.63_119 1
User-Agent: Hello from Palo Alto Network... 1
TOTAL: 6 6

NNRP client timeouts [Top 20]:

SystemConnPeer
69-5-169-118.infrawat.ch 1 1
97.172.132.66.censys-scanner.com 1 2
TOTAL: 2 2 4