Daily Usenet report

Sep 23 03:00:05 -- Sep 24 03:00:04

Unknown entries from news log file:

First 50 / 83 lines (60.2%)

Sep 23 03:01:17 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Sep 23 03:14:28 twilightnode nnrpd[4041566]: Reading access from /usr/local/news/etc/readers.conf
Sep 23 03:14:28 twilightnode nnrpd[4041566]: Auth strategy 'localhost' does not match client. Removing.
Sep 23 03:14:28 twilightnode nnrpd[4041566]: r3-32-20.monitoring.internet-measurement.com res <anonymous>
Sep 23 03:14:28 twilightnode nnrpd[4041566]: r3-32-20.monitoring.internet-measurement.com no_match_user <anonymous> <localhost>
Sep 23 03:14:28 twilightnode nnrpd[4041566]: r3-32-20.monitoring.internet-measurement.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 23 03:14:28 twilightnode nnrpd[4041566]: r3-32-20.monitoring.internet-measurement.com match_user <anonymous> <anonymous>
Sep 23 03:14:28 twilightnode nnrpd[4041566]: r3-32-20.monitoring.internet-measurement.com no_post anonymous-read
Sep 23 04:13:01 twilightnode nnrpd[4044270]: Reading access from /usr/local/news/etc/readers.conf
Sep 23 04:13:01 twilightnode nnrpd[4044270]: Auth strategy 'localhost' does not match client. Removing.
Sep 23 04:13:01 twilightnode nnrpd[4044270]: azpdes7hf9cn.stretchoid.com res <anonymous>
Sep 23 04:13:01 twilightnode nnrpd[4044270]: azpdes7hf9cn.stretchoid.com no_match_user <anonymous> <localhost>
Sep 23 04:13:01 twilightnode nnrpd[4044270]: azpdes7hf9cn.stretchoid.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 23 04:13:01 twilightnode nnrpd[4044270]: azpdes7hf9cn.stretchoid.com match_user <anonymous> <anonymous>
Sep 23 04:13:01 twilightnode nnrpd[4044270]: azpdes7hf9cn.stretchoid.com no_post anonymous-read
Sep 23 04:13:11 twilightnode nnrpd[4044274]: Reading access from /usr/local/news/etc/readers.conf
Sep 23 04:13:11 twilightnode nnrpd[4044274]: Auth strategy 'localhost' does not match client. Removing.
Sep 23 04:13:11 twilightnode nnrpd[4044274]: azpdes7hf9cn.stretchoid.com res <anonymous>
Sep 23 04:13:11 twilightnode nnrpd[4044274]: azpdes7hf9cn.stretchoid.com no_match_user <anonymous> <localhost>
Sep 23 04:13:11 twilightnode nnrpd[4044274]: azpdes7hf9cn.stretchoid.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 23 04:13:11 twilightnode nnrpd[4044274]: azpdes7hf9cn.stretchoid.com match_user <anonymous> <anonymous>
Sep 23 04:13:11 twilightnode nnrpd[4044274]: azpdes7hf9cn.stretchoid.com no_post anonymous-read
Sep 23 05:52:44 twilightnode nnrpd[4048768]: Reading access from /usr/local/news/etc/readers.conf
Sep 23 05:52:44 twilightnode nnrpd[4048768]: Auth strategy 'localhost' does not match client. Removing.
Sep 23 05:52:44 twilightnode nnrpd[4048768]: 185.172.132.66.censys-scanner.com res <anonymous>
Sep 23 05:52:44 twilightnode nnrpd[4048768]: 185.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 23 05:52:44 twilightnode nnrpd[4048768]: 185.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 23 05:52:44 twilightnode nnrpd[4048768]: 185.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 23 05:52:44 twilightnode nnrpd[4048768]: 185.172.132.66.censys-scanner.com no_post anonymous-read
Sep 23 05:52:50 twilightnode nnrpd[4048768]: 185.172.132.66.censys-scanner.com res <anonymous>
Sep 23 05:52:50 twilightnode nnrpd[4048768]: 185.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Sep 23 05:52:50 twilightnode nnrpd[4048768]: 185.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 23 05:52:50 twilightnode nnrpd[4048768]: 185.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Sep 23 05:52:50 twilightnode nnrpd[4048768]: 185.172.132.66.censys-scanner.com no_post anonymous-read
Sep 23 06:13:35 twilightnode nnrpd[4051054]: Reading access from /usr/local/news/etc/readers.conf
Sep 23 06:13:35 twilightnode nnrpd[4051054]: Auth strategy 'localhost' does not match client. Removing.
Sep 23 06:13:35 twilightnode nnrpd[4051054]: edinburgh.scan.bufferover.run res <anonymous>
Sep 23 06:13:35 twilightnode nnrpd[4051054]: edinburgh.scan.bufferover.run no_match_user <anonymous> <localhost>
Sep 23 06:13:35 twilightnode nnrpd[4051054]: edinburgh.scan.bufferover.run no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 23 06:13:35 twilightnode nnrpd[4051054]: edinburgh.scan.bufferover.run match_user <anonymous> <anonymous>
Sep 23 06:13:35 twilightnode nnrpd[4051054]: edinburgh.scan.bufferover.run no_post anonymous-read
Sep 23 06:13:35 twilightnode nnrpd[4051055]: Reading access from /usr/local/news/etc/readers.conf
Sep 23 06:13:35 twilightnode nnrpd[4051055]: Auth strategy 'localhost' does not match client. Removing.
Sep 23 06:13:35 twilightnode nnrpd[4051055]: edinburgh.scan.bufferover.run res <anonymous>
Sep 23 06:13:35 twilightnode nnrpd[4051055]: edinburgh.scan.bufferover.run no_match_user <anonymous> <localhost>
Sep 23 06:13:35 twilightnode nnrpd[4051055]: edinburgh.scan.bufferover.run no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 23 06:13:35 twilightnode nnrpd[4051055]: edinburgh.scan.bufferover.run match_user <anonymous> <anonymous>
Sep 23 06:13:35 twilightnode nnrpd[4051055]: edinburgh.scan.bufferover.run no_post anonymous-read
Sep 23 11:04:48 twilightnode nnrpd[4064155]: Reading access from /usr/local/news/etc/readers.conf
Sep 23 11:04:48 twilightnode nnrpd[4064155]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 6732 54.2%1.2 MB 59.6%
innd 4313 34.7%602.3 KB 29.5%
innfeed 1243 10.0%207.2 KB 10.2%
nnrpd 139 1.1%14.8 KB 0.7%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 12428 100.0%2.0 MB100.0%

History cache:

ReasonCount%Count
Positive hits 18177 52.0%
Negative hits 10093 28.9%
Do not exist 6688 19.1%
Cache misses 3 0.0%
TOTAL: 4 34961 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.066 0.0%27 1.333 2.444 7.000
article cleanup00:00:00.097 0.0%6704 0.000 0.014 0.133
article logging00:00:00.259 0.0%6732 0.000 0.038 0.311
article parse00:00:00.141 0.0%9307 0.000 0.015 0.097
article write00:00:06.369 0.0%5704 0.600 1.117 2.074
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.262 0.0%37741 0.000 0.007 0.033
hisgrep/artcncl00:00:00.021 0.0%27 0.000 0.778 3.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.285 0.0%35044 0.054 0.122 0.293
history sync00:00:00.057 0.0%311 0.000 0.183 2.000
history write00:00:03.156 0.0%6704 0.143 0.471 1.122
idle23:59:50.016 99.9%38555 1151.230 2240.696 8110.176
nntp read00:00:00.760 0.0%37604 0.000 0.020 0.048
overview write00:00:04.670 0.0%5704 0.277 0.819 2.075
perl filter00:00:13.584 0.0%6704 0.912 2.026 9.696
python filter00:00:01.030 0.0%6704 0.000 0.154 0.652
site send00:00:00.274 0.0%11369 0.000 0.024 0.094
TOTAL: 1824:00:25.047100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.019 0.0%5823 0.000 0.003 0.062
article prepare00:00:00.002 0.0%24348 0.000 0.000 0.004
article read00:00:01.003 0.0%3937 0.000 0.255 1.000
backlog stats00:00:00.061 0.0%75563 0.000 0.001 0.006
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.525 0.0%42252 0.000 0.012 0.041
data write00:00:00.929 0.0%36565 0.000 0.025 0.059
idle23:58:48.887100.0%75563 398.905 1142.476 3390.056
status file00:00:00.113 0.0%156 0.000 0.724 3.000
TOTAL: 923:58:51.539100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:37.510100.0%17 53.500 2206.471 10533.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.002 0.0%69 0.000 0.029 0.250
TOTAL: 300:00:37.512100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 3 8987 3885 5056 46 43%42:58:55
2usenet.blueworldhosting.com 717 6613 1266 4475 872 19%23:44:15
3newsfeed.endofthelinebbs.com 2 5809 341 5365 103 5%27:22:50
4news.tebibyte.org 1 3691 51 3639 1 1%23:59:56
5news.sklaffkom.se 30 53 37 16 0 69%06:38:58
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 778 25153 5580 18551 1022 22%124:44:54
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net12.3 MB0.0 KB289.5 KB12.5 MB 97%3.3 KB
2usenet.blueworldhosting.com6.4 MB0.0 KB1.1 MB7.5 MB 85%3.6 KB
3newsfeed.endofthelinebbs.com4.1 MB0.0 KB148.4 KB4.2 MB 96%9.8 KB
4news.tebibyte.org211.8 KB0.0 KB1.2 KB213.0 KB 99%4.1 KB
5news.sklaffkom.se128.9 KB0.0 KB0.0 KB128.9 KB100%3.5 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 623.1 MB0.0 KB1.5 MB24.6 MB 93%3.8 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Sep 23 03:00:05 - 03:59:59 185 3.2% 0.051.0 MB 4.6% 0.30
Sep 23 04:00:00 - 04:59:59 143 2.5% 0.04828.3 KB 3.6% 0.23
Sep 23 05:00:00 - 05:59:59 118 2.1% 0.03527.5 KB 2.3% 0.15
Sep 23 06:00:00 - 06:59:59 148 2.6% 0.04544.7 KB 2.4% 0.15
Sep 23 07:00:00 - 07:59:59 157 2.8% 0.04497.1 KB 2.2% 0.14
Sep 23 08:00:00 - 08:59:59 197 3.5% 0.05802.9 KB 3.5% 0.22
Sep 23 09:00:00 - 09:59:59 256 4.5% 0.07802.8 KB 3.5% 0.22
Sep 23 10:00:00 - 10:59:59 312 5.5% 0.09959.9 KB 4.2% 0.27
Sep 23 11:00:00 - 11:59:59 335 5.9% 0.091.1 MB 5.1% 0.32
Sep 23 12:00:00 - 12:59:59 281 4.9% 0.081.1 MB 4.8% 0.31
Sep 23 13:00:00 - 13:59:59 221 3.9% 0.06675.9 KB 2.9% 0.19
Sep 23 14:00:00 - 14:59:59 265 4.6% 0.07985.9 KB 4.3% 0.27
Sep 23 15:00:00 - 15:59:59 329 5.8% 0.091.2 MB 5.4% 0.34
Sep 23 16:00:00 - 16:59:59 266 4.7% 0.071.2 MB 5.1% 0.33
Sep 23 17:00:00 - 17:59:59 311 5.5% 0.091.0 MB 4.5% 0.29
Sep 23 18:00:00 - 18:59:59 269 4.7% 0.07904.5 KB 3.9% 0.25
Sep 23 19:00:00 - 19:59:59 245 4.3% 0.07822.5 KB 3.6% 0.23
Sep 23 20:00:00 - 20:59:59 282 4.9% 0.081.0 MB 4.5% 0.29
Sep 23 21:00:00 - 21:59:59 288 5.0% 0.081.3 MB 5.9% 0.38
Sep 23 22:00:00 - 22:59:59 254 4.5% 0.07944.1 KB 4.1% 0.26
Sep 23 23:00:00 - 23:59:59 275 4.8% 0.081.6 MB 7.2% 0.46
Sep 24 00:00:00 - 00:59:59 210 3.7% 0.061.3 MB 5.8% 0.37
Sep 24 01:00:00 - 01:59:59 170 3.0% 0.05754.2 KB 3.3% 0.21
Sep 24 02:00:00 - 02:59:59 176 3.1% 0.05751.1 KB 3.3% 0.21
Sep 24 03:00:00 - 03:00:04 11 0.2% 2.7534.9 KB 0.2% 8.71
TOTAL: 23:59:59 5704 100.0% 0.0722.5 MB 100.0% 0.27
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 872 364 0 0 0 0 0 0 508
2newsfeed.endofthelinebbs.com 83 3 0 0 0 0 0 0 80
3twilightnode-out.news.weretis.net 72 12 0 0 0 0 0 0 60
4news.tebibyte.org 1 1 0 0 0 0 0 0 0
TOTAL: 4 1028 380 0 0 0 0 0 0 648

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 42
alt.test.test.jojo 9
fido.ru.golded 8
fido.ru.fidonet.today 5
fido.ru.home 4
fido.xsu.cellular 4
hispagatos.mastodon.tag.hacking 4
alt.test.abc 3
realms.sysops 2
alt.2600.madrid 1
alt.bbs.files-announce 1
alt.test.abc.xyz.lmn 1
chmurka.statystyki 1
fido.ru.basic 1
fido.ru.ftn.develop 1
fr.comp.securite 1
grisbi.user 1
lada.auto 1
misc.phone.mobile.android 1
TOTAL: 21 380

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 506
Too many newsgroups 82
HTML Multipart 17
EMP (phn path) 8
User-issued cancel 7
TOTAL: 5 620

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 28
TOTAL: 1 28
TOTAL: 1 28

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 7680 2165 3422 78 0 5 28%23:59:51
2sklaffkom.se 5796 843 1848 2972 0 2 14%23:59:55
3newsfeed.endofthelinebbs.com 9717 17 5360 18 0 170 0%23:59:55
4weretis.net 1712 5 1651 0 0 0 0%23:59:55
5usenet.blueworldhosting.com 6564 4 3955 0 0 1 0%23:59:52
TOTAL: 5 31469 3034 16236 3068 0 178 9%119:59:28
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org5.3 MB878.7 KB6.1 MB0.1 KB/s2.8 KB23:59:51
2sklaffkom.se1.5 MB14.0 MB15.5 MB0.2 KB/s4.2 KB23:59:55
3newsfeed.endofthelinebbs.com73.0 KB56.9 KB129.9 KB0.0 KB/s3.7 KB23:59:55
4usenet.blueworldhosting.com24.1 KB0.0 KB24.1 KB0.0 KB/s6.0 KB23:59:52
5weretis.net11.6 KB0.0 KB11.6 KB0.0 KB/s2.3 KB23:59:55
TOTAL: 56.9 MB14.9 MB21.8 MB0.1 KB/s3.7 KB119:59:28
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1azpdcgmsujgw.stretchoid.com 2 00.0 KB 0 0 000:00:10
2azpdes7hf9cn.stretchoid.com 2 00.0 KB 0 0 000:00:10
3edinburgh.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
4185.172.132.66.censys-scanner.com 1 00.0 KB 0 0 000:00:10
5198.235.24.110 1 00.0 KB 0 0 000:00:00
669-5-169-155.infrawat.ch 1 00.0 KB 0 0 000:00:00
7r3-32-20.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
8r5-72-48.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 8 11 00.0 KB 0 0 000:00:37

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1*.stretchoid.com 4 00.0 KB 0 0 000:00:21
2*.monitoring.internet-measurement.com 2 00.0 KB 0 0 000:00:03
3*.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
4*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:10
5*.infrawat.ch 1 00.0 KB 0 0 000:00:00
6unresolved 1 00.0 KB 0 0 000:00:00
TOTAL: 6 11 00.0 KB 0 0 000:00:37

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
azpdcgmsujgw.stretchoid.com 0.011 0.025 0.00000:00:10
azpdes7hf9cn.stretchoid.com 0.012 0.021 0.00000:00:10
185.172.132.66.censys-scanner.com 0.028 0.012 0.00000:00:10
r3-32-20.monitoring.internet-measurement.com 0.003 0.015 0.00000:00:01
r5-72-48.monitoring.internet-measurement.com 0.002 0.024 0.00000:00:01
edinburgh.scan.bufferover.run 0.013 0.017 0.00000:00:00
69-5-169-155.infrawat.ch 0.002 0.016 0.00000:00:00
198.235.24.110 0.004 0.014 0.00000:00:00
? 0.004 0.011 0.00000:00:00
TOTAL: 9 0.079 0.155 0.00000:00:37

NNRP gethostbyaddr failures [Top 20]:

SystemConn
? (can't getpeername) 1
TOTAL: 1 1

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
edinburgh.scan.bufferover.run 10
185.172.132.66.censys-scanner.com 1
azpdcgmsujgw.stretchoid.com 1
azpdes7hf9cn.stretchoid.com 1
TOTAL: 4 13

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
#001 2
#026#003#001#001 2
?#024 2
?$?(?#?' 2
MGLNDD_172.234.115.63_119 2
0?#014:#021#035#026?#006#033DUr#017?_?f? ?#010? ?9?V$#017?... 1
EHLO www.censys.io 1
S? ?f?#025#020? 1
TOTAL: 8 13

NNRP client timeouts [Top 20]:

SystemConnPeer
69-5-169-155.infrawat.ch 1 1
TOTAL: 1 1 2