Daily Usenet report

Sep 17 03:00:04 -- Sep 18 03:00:03

Unknown entries from news log file:

First 50 / 149 lines (33.6%)

Sep 17 03:01:13 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Sep 17 05:45:09 twilightnode nnrpd[3644085]: Reading access from /usr/local/news/etc/readers.conf
Sep 17 05:45:09 twilightnode nnrpd[3644085]: Auth strategy 'localhost' does not match client. Removing.
Sep 17 05:45:09 twilightnode nnrpd[3644085]: 138.172.132.66.censys-scanner.com res <anonymous>
Sep 17 05:45:09 twilightnode nnrpd[3644085]: 138.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 17 05:45:09 twilightnode nnrpd[3644085]: 138.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 17 05:45:09 twilightnode nnrpd[3644085]: 138.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 17 05:45:09 twilightnode nnrpd[3644085]: 138.172.132.66.censys-scanner.com no_post anonymous-read
Sep 17 05:45:10 twilightnode nnrpd[3644085]: 138.172.132.66.censys-scanner.com res <anonymous>
Sep 17 05:45:10 twilightnode nnrpd[3644085]: 138.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 17 05:45:10 twilightnode nnrpd[3644085]: 138.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 17 05:45:10 twilightnode nnrpd[3644085]: 138.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 17 05:45:10 twilightnode nnrpd[3644085]: 138.172.132.66.censys-scanner.com no_post anonymous-read
Sep 17 08:09:07 twilightnode nnrpd[3650377]: Reading access from /usr/local/news/etc/readers.conf
Sep 17 08:09:07 twilightnode nnrpd[3650377]: Auth strategy 'localhost' does not match client. Removing.
Sep 17 08:09:07 twilightnode nnrpd[3650377]: 134.168.246.4 res <anonymous>
Sep 17 08:09:07 twilightnode nnrpd[3650377]: 134.168.246.4 no_match_user <anonymous> <localhost>
Sep 17 08:09:07 twilightnode nnrpd[3650377]: 134.168.246.4 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 17 08:09:07 twilightnode nnrpd[3650377]: 134.168.246.4 match_user <anonymous> <anonymous>
Sep 17 08:09:07 twilightnode nnrpd[3650377]: 134.168.246.4 no_post anonymous-read
Sep 17 08:09:07 twilightnode nnrpd[3650378]: Reading access from /usr/local/news/etc/readers.conf
Sep 17 08:09:07 twilightnode nnrpd[3650378]: Auth strategy 'localhost' does not match client. Removing.
Sep 17 08:09:07 twilightnode nnrpd[3650378]: 134.168.246.4 res <anonymous>
Sep 17 08:09:07 twilightnode nnrpd[3650378]: 134.168.246.4 no_match_user <anonymous> <localhost>
Sep 17 08:09:07 twilightnode nnrpd[3650378]: 134.168.246.4 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 17 08:09:07 twilightnode nnrpd[3650378]: 134.168.246.4 match_user <anonymous> <anonymous>
Sep 17 08:09:07 twilightnode nnrpd[3650378]: 134.168.246.4 no_post anonymous-read
Sep 17 08:09:17 twilightnode nnrpd[3650379]: Reading access from /usr/local/news/etc/readers.conf
Sep 17 08:09:17 twilightnode nnrpd[3650379]: Auth strategy 'localhost' does not match client. Removing.
Sep 17 08:09:17 twilightnode nnrpd[3650379]: 134.168.246.4 res <anonymous>
Sep 17 08:09:17 twilightnode nnrpd[3650379]: 134.168.246.4 no_match_user <anonymous> <localhost>
Sep 17 08:09:17 twilightnode nnrpd[3650379]: 134.168.246.4 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 17 08:09:17 twilightnode nnrpd[3650379]: 134.168.246.4 match_user <anonymous> <anonymous>
Sep 17 08:09:17 twilightnode nnrpd[3650379]: 134.168.246.4 no_post anonymous-read
Sep 17 09:52:48 twilightnode nnrpd[3654922]: Reading access from /usr/local/news/etc/readers.conf
Sep 17 09:52:48 twilightnode nnrpd[3654922]: Auth strategy 'localhost' does not match client. Removing.
Sep 17 09:52:48 twilightnode nnrpd[3654922]: 31-14-254-67.infrawat.ch res <anonymous>
Sep 17 09:52:48 twilightnode nnrpd[3654922]: 31-14-254-67.infrawat.ch no_match_user <anonymous> <localhost>
Sep 17 09:52:48 twilightnode nnrpd[3654922]: 31-14-254-67.infrawat.ch no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 17 09:52:48 twilightnode nnrpd[3654922]: 31-14-254-67.infrawat.ch match_user <anonymous> <anonymous>
Sep 17 09:52:48 twilightnode nnrpd[3654922]: 31-14-254-67.infrawat.ch no_post anonymous-read
Sep 17 09:52:55 twilightnode nnrpd[3654923]: Reading access from /usr/local/news/etc/readers.conf
Sep 17 09:52:55 twilightnode nnrpd[3654923]: Auth strategy 'localhost' does not match client. Removing.
Sep 17 09:52:55 twilightnode nnrpd[3654923]: 69-5-169-60.infrawat.ch res <anonymous>
Sep 17 09:52:55 twilightnode nnrpd[3654923]: 69-5-169-60.infrawat.ch no_match_user <anonymous> <localhost>
Sep 17 09:52:55 twilightnode nnrpd[3654923]: 69-5-169-60.infrawat.ch no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 17 09:52:55 twilightnode nnrpd[3654923]: 69-5-169-60.infrawat.ch match_user <anonymous> <anonymous>
Sep 17 09:52:55 twilightnode nnrpd[3654923]: 69-5-169-60.infrawat.ch no_post anonymous-read
Sep 17 10:22:00 twilightnode nnrpd[3656295]: Reading access from /usr/local/news/etc/readers.conf
Sep 17 10:22:00 twilightnode nnrpd[3656295]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 7250 55.0%1.3 MB 60.5%
innd 4400 33.4%620.5 KB 28.8%
innfeed 1285 9.7%203.6 KB 9.5%
nnrpd 250 1.9%25.9 KB 1.2%
controlchan 2 0.0%0.3 KB 0.0%
TOTAL: 5 13187 100.0%2.1 MB100.0%

History cache:

ReasonCount%Count
Positive hits 19757 52.7%
Negative hits 10440 27.8%
Do not exist 7183 19.2%
Cache misses 113 0.3%
TOTAL: 4 37493 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.038 0.0%18 1.000 2.111 2.583
article cleanup00:00:00.059 0.0%7219 0.000 0.008 0.154
article logging00:00:00.253 0.0%7264 0.000 0.035 0.231
article parse00:00:00.130 0.0%10079 0.000 0.013 0.091
article write00:00:06.406 0.0%6195 0.558 1.034 2.467
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.270 0.0%40213 0.000 0.007 0.080
hisgrep/artcncl00:00:00.025 0.0%18 1.000 1.389 1.583
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.151 0.0%37717 0.062 0.110 0.190
history sync00:00:00.053 0.0%316 0.000 0.168 2.000
history write00:00:03.148 0.0%7219 0.167 0.436 1.093
idle23:59:49.778 99.9%41150 983.234 2099.387 8574.929
nntp read00:00:00.859 0.0%40172 0.005 0.021 0.176
overview write00:00:04.267 0.0%6195 0.250 0.689 2.417
perl filter00:00:12.590 0.0%7219 0.953 1.744 11.308
python filter00:00:00.979 0.0%7219 0.000 0.136 1.267
site send00:00:00.279 0.0%12357 0.000 0.023 0.120
TOTAL: 1824:00:23.285100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.025 0.0%6395 0.000 0.004 0.100
article prepare00:00:00.002 0.0%25672 0.000 0.000 0.005
article read00:00:00.922 0.0%4164 0.000 0.221 1.200
backlog stats00:00:00.037 0.0%82375 0.000 0.000 0.015
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.672 0.0%46128 0.000 0.015 0.051
data write00:00:01.024 0.0%40061 0.000 0.026 0.125
idle23:50:04.457100.0%82375 367.616 1041.632 5540.000
status file00:00:00.161 0.0%178 0.000 0.904 9.000
TOTAL: 923:50:07.300100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:25.114100.0%33 17.500 761.030 10017.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.003 0.0%202 0.000 0.015 0.200
TOTAL: 300:00:25.117100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 5 11073 4766 6242 65 43%48:10:26
2usenet.blueworldhosting.com 716 7149 1113 5153 883 15%23:48:45
3newsfeed.endofthelinebbs.com 2 6468 297 6064 107 4%27:07:25
4news.tebibyte.org 1 763 78 685 0 10%07:46:59
5news.sklaffkom.se 38 88 76 12 0 86%09:59:31
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 787 25541 6330 18156 1055 24%116:53:06
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net14.4 MB0.0 KB153.1 KB14.5 MB 98%3.1 KB
2usenet.blueworldhosting.com7.4 MB0.0 KB1.3 MB8.7 MB 84%4.5 KB
3newsfeed.endofthelinebbs.com3.4 MB0.0 KB166.4 KB3.6 MB 95%9.1 KB
4news.tebibyte.org361.2 KB0.0 KB0.0 KB361.2 KB100%4.6 KB
5news.sklaffkom.se285.6 KB0.0 KB0.0 KB285.6 KB100%3.8 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 625.8 MB0.0 KB1.7 MB27.5 MB 93%3.8 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Sep 17 03:00:04 - 03:59:59 92 1.5% 0.03398.6 KB 1.6% 0.11
Sep 17 04:00:00 - 04:59:59 148 2.4% 0.04676.4 KB 2.7% 0.19
Sep 17 05:00:00 - 05:59:59 77 1.2% 0.02328.5 KB 1.3% 0.09
Sep 17 06:00:00 - 06:59:59 101 1.6% 0.03425.6 KB 1.7% 0.12
Sep 17 07:00:00 - 07:59:59 141 2.3% 0.04412.6 KB 1.6% 0.11
Sep 17 08:00:00 - 08:59:59 270 4.4% 0.07863.1 KB 3.4% 0.24
Sep 17 09:00:00 - 09:59:59 326 5.3% 0.091.3 MB 5.2% 0.37
Sep 17 10:00:00 - 10:59:59 281 4.5% 0.08999.1 KB 3.9% 0.28
Sep 17 11:00:00 - 11:59:59 353 5.7% 0.101.2 MB 4.8% 0.34
Sep 17 12:00:00 - 12:59:59 354 5.7% 0.101.2 MB 4.8% 0.34
Sep 17 13:00:00 - 13:59:59 317 5.1% 0.091.1 MB 4.5% 0.32
Sep 17 14:00:00 - 14:59:59 314 5.1% 0.091.1 MB 4.6% 0.32
Sep 17 15:00:00 - 15:59:59 326 5.3% 0.091.4 MB 5.7% 0.41
Sep 17 16:00:00 - 16:59:59 300 4.9% 0.081.0 MB 4.1% 0.29
Sep 17 17:00:00 - 17:59:59 411 6.7% 0.111.6 MB 6.3% 0.45
Sep 17 18:00:00 - 18:59:59 348 5.6% 0.101.5 MB 6.1% 0.43
Sep 17 19:00:00 - 19:59:59 245 4.0% 0.07893.3 KB 3.5% 0.25
Sep 17 20:00:00 - 20:59:59 309 5.0% 0.091.3 MB 5.4% 0.38
Sep 17 21:00:00 - 21:59:59 258 4.2% 0.07979.1 KB 3.8% 0.27
Sep 17 22:00:00 - 22:59:59 370 6.0% 0.101.6 MB 6.6% 0.46
Sep 17 23:00:00 - 23:59:59 267 4.3% 0.071.4 MB 5.8% 0.41
Sep 18 00:00:00 - 00:59:59 245 4.0% 0.071.5 MB 5.9% 0.41
Sep 18 01:00:00 - 01:59:59 186 3.0% 0.05974.7 KB 3.8% 0.27
Sep 18 02:00:00 - 02:59:59 128 2.1% 0.04788.4 KB 3.1% 0.22
Sep 18 03:00:00 - 03:00:03 13 0.2% 4.3324.7 KB 0.1% 8.22
TOTAL: 23:59:59 6180 100.0% 0.0724.9 MB 100.0% 0.30
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 883 337 0 0 0 0 0 0 546
2twilightnode-out.news.weretis.net 109 17 0 0 0 0 0 0 92
3newsfeed.endofthelinebbs.com 78 7 0 0 0 0 0 0 71
TOTAL: 3 1070 361 0 0 0 0 0 0 709

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 22
fido.ru.golded 12
pl.listserv.chomor-l 12
hispagatos.mastodon.tag.hacking 9
newsgrouper.support 4
alt.test.test.jojo 2
fido.ru.fidonet.today 2
alt.2600.madrid 1
alt.ast.test 1
alt.bbs.files-announce 1
alt.tasteless.jokes 1
ba.sports 1
biz.mlm 1
chmurka.statystyki 1
fido.koenig.sysop 1
fido.ru.home 1
hispagatos.mastodon.tag.hackers 1
TOTAL: 18 361

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 559
Too many newsgroups 68
User-issued cancel 28
Too many newsgroups (meow) 5
HTML Multipart 4
TOTAL: 5 664

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 45
TOTAL: 1 45
TOTAL: 1 45

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 8204 2195 3818 131 0 22 26%23:59:36
2sklaffkom.se 6226 872 2127 3147 0 1 14%23:59:10
3newsfeed.endofthelinebbs.com 10854 33 5802 53 0 253 0%23:59:54
4weretis.net 1653 5 1560 0 0 0 0%23:33:13
5usenet.blueworldhosting.com 8010 4 4698 0 0 14 0%23:59:14
TOTAL: 5 34947 3109 18005 3331 0 290 8%119:31:07
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org6.0 MB925.0 KB6.9 MB0.1 KB/s3.0 KB23:59:36
2sklaffkom.se1.4 MB15.7 MB17.1 MB0.2 KB/s4.4 KB23:59:10
3newsfeed.endofthelinebbs.com105.7 KB195.4 KB301.2 KB0.0 KB/s3.5 KB23:59:54
4usenet.blueworldhosting.com15.8 KB0.0 KB15.8 KB0.0 KB/s3.9 KB23:59:14
5weretis.net15.2 KB0.0 KB15.2 KB0.0 KB/s3.0 KB23:33:13
TOTAL: 57.5 MB16.8 MB24.3 MB0.1 KB/s3.9 KB119:31:07
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1134.168.246.4 3 00.0 KB 0 0 000:00:10
2216.172.132.66.censys-scanner.com 3 00.0 KB 0 0 000:00:02
361.155.45.199.censys-scanner.com 3 00.0 KB 0 0 000:00:04
487.251.64.129 2 00.0 KB 0 0 000:00:00
5138.172.132.66.censys-scanner.com 1 00.0 KB 0 0 000:00:01
6205.210.31.29 1 00.0 KB 0 0 000:00:00
731-14-254-67.infrawat.ch 1 00.0 KB 0 0 000:00:00
869-5-169-60.infrawat.ch 1 00.0 KB 0 0 000:00:00
994.154.43.21 1 00.0 KB 0 0 000:00:00
1094.154.43.36 1 00.0 KB 0 0 000:00:00
11richards.probe.onyphe.net 1 00.0 KB 0 0 000:00:00
12wilkins.probe.onyphe.net 1 00.0 KB 0 0 000:00:03
TOTAL: 12 19 00.0 KB 0 0 000:00:25

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 8 00.0 KB 0 0 000:00:11
2*.66.censys-scanner.com 4 00.0 KB 0 0 000:00:03
3*.199.censys-scanner.com 3 00.0 KB 0 0 000:00:04
4*.infrawat.ch 2 00.0 KB 0 0 000:00:01
5*.probe.onyphe.net 2 00.0 KB 0 0 000:00:03
TOTAL: 5 19 00.0 KB 0 0 000:00:25

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
134.168.246.4 0.012 0.031 0.00000:00:10
61.155.45.199.censys-scanner.com 0.039 0.031 0.00000:00:04
wilkins.probe.onyphe.net 0.006 0.007 0.00000:00:03
216.172.132.66.censys-scanner.com 0.038 0.023 0.00000:00:02
138.172.132.66.censys-scanner.com 0.032 0.016 0.00000:00:01
richards.probe.onyphe.net 0.004 0.010 0.00000:00:00
31-14-254-67.infrawat.ch 0.009 0.009 0.00000:00:00
205.210.31.29 0.004 0.010 0.00000:00:00
69-5-169-60.infrawat.ch 0.006 0.004 0.00000:00:00
94.154.43.21 0.003 0.018 0.00000:00:00
87.251.64.129 0.012 0.012 0.00000:00:00
94.154.43.36 0.009 0.008 0.00000:00:00
TOTAL: 12 0.174 0.179 0.00000:00:25

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
87.251.64.129 9
94.154.43.36 6
134.168.246.4 2
richards.probe.onyphe.net 2
138.172.132.66.censys-scanner.com 1
216.172.132.66.censys-scanner.com 1
61.155.45.199.censys-scanner.com 1
TOTAL: 7 22

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 3
Connection: close 2
User-Agent: Mozilla/5.0 (Windows NT 10.0... 2
#026#003#001 1
#026#003#001#002 1
#026#003#003#002c#001 1
?#024 1
?#024?#011?#023 1
?$?,?r?s?#023#002#023#001?#024?#007?#022?#023?'?/?#024?(?0?`?a... 1
Accept-Encoding: gzip 1
Accept-Encoding: gzip, deflate, br 1
Accept-Language: en-US,en;q=0.9 1
Accept: */* 1
Accept: text/html,application/xhtml+xml,... 1
GET / HTTP/1.1 1
GET http://api.ipify.org/ HTTP/1.1 1
Host: 172.234.115.63:119 1
Host: api.ipify.org 1
TOTAL: 18 22

NNRP client timeouts [Top 20]:

SystemConnPeer
216.172.132.66.censys-scanner.com 1 2
61.155.45.199.censys-scanner.com 1 2
69-5-169-60.infrawat.ch 1 1
TOTAL: 3 3 7