Daily Usenet report

Sep 19 03:00:03 -- Sep 20 03:00:03

Unknown entries from news log file:

First 50 / 424 lines (11.8%)

Sep 19 03:01:11 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Sep 19 03:03:55 twilightnode nnrpd[3770756]: Reading access from /usr/local/news/etc/readers.conf
Sep 19 03:03:55 twilightnode nnrpd[3770756]: Auth strategy 'localhost' does not match client. Removing.
Sep 19 03:03:55 twilightnode nnrpd[3770756]: 66.61.98.95 res <anonymous>
Sep 19 03:03:55 twilightnode nnrpd[3770756]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 19 03:03:55 twilightnode nnrpd[3770756]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 19 03:03:55 twilightnode nnrpd[3770756]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 19 03:03:55 twilightnode nnrpd[3770756]: 66.61.98.95 no_post anonymous-read
Sep 19 03:03:55 twilightnode nnrpd[3770757]: Reading access from /usr/local/news/etc/readers.conf
Sep 19 03:03:55 twilightnode nnrpd[3770757]: Auth strategy 'localhost' does not match client. Removing.
Sep 19 03:03:55 twilightnode nnrpd[3770757]: 66.61.98.95 res <anonymous>
Sep 19 03:03:55 twilightnode nnrpd[3770757]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 19 03:03:55 twilightnode nnrpd[3770757]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 19 03:03:55 twilightnode nnrpd[3770757]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 19 03:03:55 twilightnode nnrpd[3770757]: 66.61.98.95 no_post anonymous-read
Sep 19 03:05:20 twilightnode nnrpd[3771007]: Reading access from /usr/local/news/etc/readers.conf
Sep 19 03:05:20 twilightnode nnrpd[3771007]: Auth strategy 'localhost' does not match client. Removing.
Sep 19 03:05:20 twilightnode nnrpd[3771007]: 66.61.98.95 res <anonymous>
Sep 19 03:05:20 twilightnode nnrpd[3771007]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 19 03:05:20 twilightnode nnrpd[3771007]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 19 03:05:20 twilightnode nnrpd[3771007]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 19 03:05:20 twilightnode nnrpd[3771007]: 66.61.98.95 no_post anonymous-read
Sep 19 03:05:20 twilightnode nnrpd[3771008]: Reading access from /usr/local/news/etc/readers.conf
Sep 19 03:05:20 twilightnode nnrpd[3771008]: Auth strategy 'localhost' does not match client. Removing.
Sep 19 03:05:20 twilightnode nnrpd[3771008]: 66.61.98.95 res <anonymous>
Sep 19 03:05:20 twilightnode nnrpd[3771008]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 19 03:05:20 twilightnode nnrpd[3771008]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 19 03:05:20 twilightnode nnrpd[3771008]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 19 03:05:20 twilightnode nnrpd[3771008]: 66.61.98.95 no_post anonymous-read
Sep 19 03:17:08 twilightnode nnrpd[3771559]: Reading access from /usr/local/news/etc/readers.conf
Sep 19 03:17:08 twilightnode nnrpd[3771559]: Auth strategy 'localhost' does not match client. Removing.
Sep 19 03:17:08 twilightnode nnrpd[3771559]: 66.61.98.95 res <anonymous>
Sep 19 03:17:08 twilightnode nnrpd[3771559]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 19 03:17:08 twilightnode nnrpd[3771559]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 19 03:17:08 twilightnode nnrpd[3771559]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 19 03:17:08 twilightnode nnrpd[3771559]: 66.61.98.95 no_post anonymous-read
Sep 19 03:17:08 twilightnode nnrpd[3771560]: Reading access from /usr/local/news/etc/readers.conf
Sep 19 03:17:08 twilightnode nnrpd[3771560]: Auth strategy 'localhost' does not match client. Removing.
Sep 19 03:17:08 twilightnode nnrpd[3771560]: 66.61.98.95 res <anonymous>
Sep 19 03:17:08 twilightnode nnrpd[3771560]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 19 03:17:08 twilightnode nnrpd[3771560]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 19 03:17:08 twilightnode nnrpd[3771560]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 19 03:17:08 twilightnode nnrpd[3771560]: 66.61.98.95 no_post anonymous-read
Sep 19 03:20:21 twilightnode nnrpd[3771691]: Reading access from /usr/local/news/etc/readers.conf
Sep 19 03:20:21 twilightnode nnrpd[3771691]: Auth strategy 'localhost' does not match client. Removing.
Sep 19 03:20:21 twilightnode nnrpd[3771691]: 66.61.98.95 res <anonymous>
Sep 19 03:20:21 twilightnode nnrpd[3771691]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 19 03:20:21 twilightnode nnrpd[3771691]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 19 03:20:21 twilightnode nnrpd[3771691]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 19 03:20:21 twilightnode nnrpd[3771691]: 66.61.98.95 no_post anonymous-read

Log entries by program:

Program nameLines%LinesSize%Size
inn 6942 37.8%1.2 MB 48.6%
nnrpd 5703 31.0%492.9 KB 19.1%
innd 4486 24.4%615.2 KB 23.9%
innfeed 1254 6.8%214.0 KB 8.3%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 18386 100.0%2.5 MB100.0%

History cache:

ReasonCount%Count
Positive hits 19278 52.8%
Negative hits 10345 28.3%
Do not exist 6887 18.9%
Cache misses 11 0.0%
TOTAL: 4 36521 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.053 0.0%23 0.111 2.304 10.000
article cleanup00:00:00.076 0.0%6910 0.000 0.011 0.105
article logging00:00:00.219 0.0%6941 0.000 0.032 0.150
article parse00:00:00.147 0.0%8874 0.000 0.017 0.105
article write00:00:06.053 0.0%5820 0.544 1.040 2.286
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.229 0.0%37717 0.000 0.006 0.075
hisgrep/artcncl00:00:00.018 0.0%23 0.000 0.783 3.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.178 0.0%36630 0.058 0.114 0.254
history sync00:00:00.076 0.0%343 0.000 0.222 1.667
history write00:00:03.224 0.0%6910 0.157 0.467 1.417
idle24:00:03.951 99.9%38988 1112.902 2216.168 9377.453
nntp read00:00:00.741 0.0%37902 0.000 0.020 0.117
overview write00:00:04.110 0.0%5820 0.250 0.706 2.941
perl filter00:00:13.534 0.0%6910 0.873 1.959 12.421
python filter00:00:01.006 0.0%6910 0.000 0.146 1.158
site send00:00:00.284 0.0%11630 0.000 0.024 0.125
TOTAL: 1824:00:37.899100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.026 0.0%6120 0.000 0.004 0.108
article prepare00:00:00.005 0.0%25832 0.000 0.000 0.010
article read00:00:00.976 0.0%3998 0.000 0.244 1.400
backlog stats00:00:00.049 0.0%76859 0.000 0.001 0.005
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.554 0.0%43161 0.000 0.013 0.033
data write00:00:00.941 0.0%37520 0.000 0.025 0.092
idle23:59:38.414100.0%76859 373.066 1123.856 4561.618
status file00:00:00.193 0.0%160 0.000 1.206 8.000
TOTAL: 923:59:41.158100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:27:31.300 99.9%7596 54.000 217.391 10393.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:01.349 0.1%20490 0.000 0.066 0.500
readart00:00:00.342 0.0%772 0.000 0.443 1.000
TOTAL: 400:27:32.991100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 5 10651 4369 6218 64 41%46:09:50
2usenet.blueworldhosting.com 721 6907 1073 4915 919 15%23:52:09
3newsfeed.endofthelinebbs.com 1 5924 187 5600 137 3%28:14:37
4news.tebibyte.org 1 6371 89 6281 1 1%23:59:51
5news.sklaffkom.se 38 76 70 6 0 92%08:38:37
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 791 29929 5788 23020 1121 19%130:55:04
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net12.8 MB0.0 KB268.0 KB13.0 MB 97%3.0 KB
2usenet.blueworldhosting.com4.3 MB0.0 KB1.1 MB5.5 MB 79%2.8 KB
3newsfeed.endofthelinebbs.com2.2 MB0.0 KB204.9 KB2.4 MB 91%7.5 KB
4news.tebibyte.org360.3 KB0.0 KB1.3 KB361.6 KB 99%4.0 KB
5news.sklaffkom.se216.2 KB0.0 KB0.0 KB216.2 KB100%3.1 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 619.8 MB0.0 KB1.6 MB21.4 MB 92%3.2 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Sep 19 03:00:03 - 03:59:59 111 1.9% 0.03541.3 KB 2.7% 0.15
Sep 19 04:00:00 - 04:59:59 110 1.9% 0.03416.6 KB 2.1% 0.12
Sep 19 05:00:00 - 05:59:59 105 1.8% 0.03280.0 KB 1.4% 0.08
Sep 19 06:00:00 - 06:59:59 102 1.8% 0.03303.5 KB 1.5% 0.08
Sep 19 07:00:00 - 07:59:59 119 2.0% 0.03333.7 KB 1.7% 0.09
Sep 19 08:00:00 - 08:59:59 219 3.8% 0.061005.6 KB 5.0% 0.28
Sep 19 09:00:00 - 09:59:59 244 4.2% 0.07711.3 KB 3.5% 0.20
Sep 19 10:00:00 - 10:59:59 388 6.7% 0.111.1 MB 5.3% 0.30
Sep 19 11:00:00 - 11:59:59 278 4.8% 0.08788.1 KB 3.9% 0.22
Sep 19 12:00:00 - 12:59:59 290 5.0% 0.08719.7 KB 3.6% 0.20
Sep 19 13:00:00 - 13:59:59 295 5.1% 0.08831.4 KB 4.1% 0.23
Sep 19 14:00:00 - 14:59:59 368 6.3% 0.101.4 MB 6.9% 0.39
Sep 19 15:00:00 - 15:59:59 336 5.8% 0.091.3 MB 6.4% 0.36
Sep 19 16:00:00 - 16:59:59 280 4.8% 0.081.0 MB 5.2% 0.29
Sep 19 17:00:00 - 17:59:59 257 4.4% 0.071.3 MB 6.8% 0.38
Sep 19 18:00:00 - 18:59:59 358 6.2% 0.101.0 MB 5.3% 0.30
Sep 19 19:00:00 - 19:59:59 319 5.5% 0.09860.5 KB 4.3% 0.24
Sep 19 20:00:00 - 20:59:59 267 4.6% 0.07829.8 KB 4.1% 0.23
Sep 19 21:00:00 - 21:59:59 274 4.7% 0.08827.9 KB 4.1% 0.23
Sep 19 22:00:00 - 22:59:59 255 4.4% 0.07882.7 KB 4.4% 0.25
Sep 19 23:00:00 - 23:59:59 262 4.5% 0.071.0 MB 5.2% 0.29
Sep 20 00:00:00 - 00:59:59 241 4.1% 0.07900.3 KB 4.5% 0.25
Sep 20 01:00:00 - 01:59:59 170 2.9% 0.05768.1 KB 3.8% 0.21
Sep 20 02:00:00 - 02:59:59 164 2.8% 0.05852.0 KB 4.2% 0.24
Sep 20 03:00:00 - 03:00:03 9 0.2% 3.008.2 KB 0.0% 2.74
TOTAL: 24:00:00 5821 100.0% 0.0719.7 MB 100.0% 0.23
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 919 338 0 0 0 0 0 0 581
2newsfeed.endofthelinebbs.com 105 5 0 0 0 0 0 0 100
3twilightnode-out.news.weretis.net 95 7 0 0 0 0 0 0 88
4news.tebibyte.org 2 2 0 0 0 0 0 0 0
TOTAL: 4 1121 352 0 0 0 0 0 0 769

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 12
osnet.test 10
fido.golded 4
alt.test.9 3
fido.mo.fidopoika 3
fido.su.tormoz 3
hispagatos.mastodon.tag.hacking 3
alt.comp.pastebin 2
chmurka.test 2
fido.ru.home 2
fido.ru.usr 2
fido.testing 2
S.E.D 1
aioe.test.tor 1
alt.aber 1
alt.anarchism.syndicalist 1
alt.bbs.files-announce 1
alt.cybercafes 1
alt.music 1
TOTAL: 29 352

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 612
Too many newsgroups 77
EMP (phn path) 22
User-issued cancel 13
HTML Multipart 11
Too many newsgroups (meow) 3
TOTAL: 6 738

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 31
TOTAL: 1 31
TOTAL: 1 31

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 7628 2453 3288 67 0 26 32%23:59:54
2sklaffkom.se 5906 1008 1925 2875 0 3 17%23:59:57
3newsfeed.endofthelinebbs.com 10213 35 5604 25 0 296 0%23:59:56
4usenet.blueworldhosting.com 7168 3 4332 0 0 2 0%23:59:56
5weretis.net 1438 3 1364 0 0 0 0%23:56:30
TOTAL: 5 32353 3502 16513 2967 0 327 10%119:56:13
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org6.5 MB403.8 KB6.9 MB0.1 KB/s2.8 KB23:59:54
2sklaffkom.se1.6 MB11.4 MB13.0 MB0.2 KB/s3.4 KB23:59:57
3newsfeed.endofthelinebbs.com99.9 KB92.3 KB192.2 KB0.0 KB/s3.2 KB23:59:56
4usenet.blueworldhosting.com12.6 KB0.0 KB12.6 KB0.0 KB/s4.2 KB23:59:56
5weretis.net4.8 KB0.0 KB4.8 KB0.0 KB/s1.6 KB23:56:30
TOTAL: 58.2 MB11.8 MB20.1 MB0.0 KB/s3.2 KB119:56:13
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
166.61.98.95 47 7727.3 MB 62 0 000:27:16
TOTAL: 1 47 7727.3 MB 62 0 000:27:16

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 49 7727.3 MB 62 0 000:27:16
2*.167.censys-scanner.com 3 00.0 KB 0 0 000:00:01
3*.infrawat.ch 2 00.0 KB 0 0 000:00:00
4*.stretchoid.com 2 00.0 KB 0 0 000:00:10
5*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:02
6*.ip.frontiernet.net 1 00.0 KB 0 0 000:00:00
7*.shodan.io 1 00.0 KB 0 0 000:00:00
TOTAL: 7 59 7727.3 MB 62 0 000:27:32

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
66.61.98.95 1.276 4.145 0.00000:27:16
azpdesfrgoji.stretchoid.com 0.010 0.016 0.00000:00:10
173.186.132.66.censys-scanner.com 0.033 0.021 0.00000:00:02
56.146.94.167.censys-scanner.com 0.029 0.036 0.00000:00:01
census6.shodan.io 0.003 0.016 0.00000:00:00
94.154.43.21 0.009 0.029 0.00000:00:00
31-14-254-92.infrawat.ch 0.005 0.011 0.00000:00:00
172-99-61-198.e55debe299579139e7cfe9be84b63964.ip.frontiernet.net 0.003 0.012 0.00000:00:00
194-88-98-84.infrawat.ch 0.007 0.005 0.00000:00:00
TOTAL: 9 1.375 4.291 0.00000:27:32

Curious NNRP explorers [Top 20]:

SystemConn
56.146.94.167.censys-scanner.com 3
94.154.43.21 2
azpdesfrgoji.stretchoid.com 2
172-99-61-198.e55debe299579139e7cfe9be84b63964.ip.frontiernet.net 1
173.186.132.66.censys-scanner.com 1
194-88-98-84.infrawat.ch 1
31-14-254-92.infrawat.ch 1
census6.shodan.io 1
TOTAL: 8 12

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
173.186.132.66.censys-scanner.com 1
56.146.94.167.censys-scanner.com 1
azpdesfrgoji.stretchoid.com 1
TOTAL: 3 3

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 2
MGLNDD_172.234.115.63_119 1
TOTAL: 2 3

NNRP client timeouts [Top 20]:

SystemConnPeer
31-14-254-92.infrawat.ch 1 1
56.146.94.167.censys-scanner.com 1 2
66.61.98.95 1 1
TOTAL: 3 3 5

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1alt 626 81.1%
2rocksolid 27 3.5%
3free 26 3.4%
4hispagatos 26 3.4%
5rec 16 2.1%
6junk 15 1.9%
7it 11 1.4%
8comp 6 0.8%
9linux 3 0.4%
10soc 3 0.4%
11talk 3 0.4%
12aus 2 0.3%
13microsoft 2 0.3%
14uk 2 0.3%
15de 1 0.1%
16fr 1 0.1%
17nl 1 0.1%
18sfnet 1 0.1%
TOTAL: 18 772100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1alt.test 466
2alt.arts.poetry.comments 84
3alt.fan.rush-limbaugh 36
4rocksolid.shared.test 27
5hispagatos.hacking.news 23
6free.usenet 20
7junk 15
8alt.recovery.aa 9
9rec.food.cooking 9
10alt.buddha.short.fat.guy 6
11free.pt 6
12it.sport.calcio.inter-fc 6
13alt.russian.z1 5
14alt.global-warming 4
15it.cultura.filosofia 4
16alt.tv.big-brother 3
17comp.theory 3
18hispagatos.comunicados 3
19rec.arts.drwho 3
20talk.politics.misc 3
21alt.anonymous.messages 2
22alt.privacy.anon-server 2
23alt.usage.english 2
24comp.lang.c 2
25soc.culture.jewish 2
26alt.atheism 1
27alt.christnet 1
28alt.english.usage 1
29alt.messianic 1
30alt.politics 1
31alt.support.depression.crisis 1
32alt.sys.pdp10 1
33aus.cars 1
34aus.politics 1
35comp.arch 1
36de.alt.fan.aldi 1
37fr.sci.maths 1
38it.tlc.cellulari.android 1
39linux.debian.bugs.dist 1
40linux.debian.changes.devel 1
41linux.kernel.netdev 1
42microsoft.public.windowsxp.general 1
43microsoft.public.windowsxp.help_and_support 1
44nl.scouting 1
45rec.arts.comics.dc.universe 1
46rec.arts.tv 1
47rec.autos.driving 1
48rec.sport.soccer 1
49sfnet.keskustelu.varaventtiili 1
50soc.culture.china 1
51uk.current-events.terrorism 1
52uk.politics.electoral 1
TOTAL: 52 772
innreport from INN 2.7.3 based on initial work (©) 1996-2001 by Fabien Tassin <fta@sofaraway.org> and enhanced by several contributors since then