Daily Usenet report

Sep 28 03:00:04 -- Sep 29 03:00:04

Unknown entries from news log file:

First 50 / 447 lines (11.2%)

Sep 28 03:01:15 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Sep 28 03:19:13 twilightnode nnrpd[226592]: Reading access from /usr/local/news/etc/readers.conf
Sep 28 03:19:13 twilightnode nnrpd[226592]: Auth strategy 'localhost' does not match client. Removing.
Sep 28 03:19:13 twilightnode nnrpd[226592]: 66.61.98.95 res <anonymous>
Sep 28 03:19:13 twilightnode nnrpd[226592]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 28 03:19:13 twilightnode nnrpd[226592]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 28 03:19:13 twilightnode nnrpd[226592]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 28 03:19:13 twilightnode nnrpd[226592]: 66.61.98.95 no_post anonymous-read
Sep 28 03:19:14 twilightnode nnrpd[226593]: Reading access from /usr/local/news/etc/readers.conf
Sep 28 03:19:14 twilightnode nnrpd[226593]: Auth strategy 'localhost' does not match client. Removing.
Sep 28 03:19:14 twilightnode nnrpd[226593]: 66.61.98.95 res <anonymous>
Sep 28 03:19:14 twilightnode nnrpd[226593]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 28 03:19:14 twilightnode nnrpd[226593]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 28 03:19:14 twilightnode nnrpd[226593]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 28 03:19:14 twilightnode nnrpd[226593]: 66.61.98.95 no_post anonymous-read
Sep 28 04:15:41 twilightnode nnrpd[229261]: Reading access from /usr/local/news/etc/readers.conf
Sep 28 04:15:41 twilightnode nnrpd[229261]: Auth strategy 'localhost' does not match client. Removing.
Sep 28 04:15:41 twilightnode nnrpd[229261]: 66.61.98.95 res <anonymous>
Sep 28 04:15:41 twilightnode nnrpd[229261]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 28 04:15:41 twilightnode nnrpd[229261]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 28 04:15:41 twilightnode nnrpd[229261]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 28 04:15:41 twilightnode nnrpd[229261]: 66.61.98.95 no_post anonymous-read
Sep 28 04:15:41 twilightnode nnrpd[229262]: Reading access from /usr/local/news/etc/readers.conf
Sep 28 04:15:41 twilightnode nnrpd[229262]: Auth strategy 'localhost' does not match client. Removing.
Sep 28 04:15:41 twilightnode nnrpd[229262]: 66.61.98.95 res <anonymous>
Sep 28 04:15:41 twilightnode nnrpd[229262]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 28 04:15:41 twilightnode nnrpd[229262]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 28 04:15:41 twilightnode nnrpd[229262]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 28 04:15:41 twilightnode nnrpd[229262]: 66.61.98.95 no_post anonymous-read
Sep 28 04:57:25 twilightnode nnrpd[231089]: Reading access from /usr/local/news/etc/readers.conf
Sep 28 04:57:25 twilightnode nnrpd[231089]: Auth strategy 'localhost' does not match client. Removing.
Sep 28 04:57:25 twilightnode nnrpd[231089]: 66.61.98.95 res <anonymous>
Sep 28 04:57:25 twilightnode nnrpd[231089]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 28 04:57:25 twilightnode nnrpd[231089]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 28 04:57:25 twilightnode nnrpd[231089]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 28 04:57:25 twilightnode nnrpd[231089]: 66.61.98.95 no_post anonymous-read
Sep 28 04:57:25 twilightnode nnrpd[231090]: Reading access from /usr/local/news/etc/readers.conf
Sep 28 04:57:25 twilightnode nnrpd[231090]: Auth strategy 'localhost' does not match client. Removing.
Sep 28 04:57:25 twilightnode nnrpd[231090]: 66.61.98.95 res <anonymous>
Sep 28 04:57:25 twilightnode nnrpd[231090]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 28 04:57:25 twilightnode nnrpd[231090]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 28 04:57:25 twilightnode nnrpd[231090]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 28 04:57:25 twilightnode nnrpd[231090]: 66.61.98.95 no_post anonymous-read
Sep 28 05:05:46 twilightnode nnrpd[231573]: Reading access from /usr/local/news/etc/readers.conf
Sep 28 05:05:46 twilightnode nnrpd[231573]: Auth strategy 'localhost' does not match client. Removing.
Sep 28 05:05:46 twilightnode nnrpd[231573]: 66.61.98.95 res <anonymous>
Sep 28 05:05:46 twilightnode nnrpd[231573]: 66.61.98.95 no_match_user <anonymous> <localhost>
Sep 28 05:05:46 twilightnode nnrpd[231573]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Sep 28 05:05:46 twilightnode nnrpd[231573]: 66.61.98.95 match_user <anonymous> <anonymous>
Sep 28 05:05:46 twilightnode nnrpd[231573]: 66.61.98.95 no_post anonymous-read

Log entries by program:

Program nameLines%LinesSize%Size
inn 7950 49.7%1.4 MB 60.8%
nnrpd 4528 28.3%391.7 KB 16.8%
innd 2259 14.1%327.0 KB 14.0%
innfeed 1256 7.9%197.4 KB 8.4%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 15994 100.0%2.3 MB100.0%

History cache:

ReasonCount%Count
Positive hits 21194 51.5%
Negative hits 12008 29.2%
Do not exist 7886 19.2%
Cache misses 75 0.2%
TOTAL: 4 41163 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.093 0.0%26 0.000 3.577 18.000
article cleanup00:00:00.104 0.0%7940 0.000 0.013 0.143
article logging00:00:00.300 0.0%7958 0.000 0.038 0.185
article parse00:00:00.133 0.0%11166 0.000 0.012 0.148
article write00:00:06.895 0.0%6719 0.606 1.026 2.211
artlog/artparse00:00:00.000 0.0%1 0.000 0.000 0.000
data move00:00:00.250 0.0%41874 0.000 0.006 0.106
hisgrep/artcncl00:00:00.023 0.0%26 0.000 0.885 3.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:05.109 0.0%41338 0.060 0.124 0.320
history sync00:00:00.069 0.0%411 0.000 0.168 1.500
history write00:00:03.748 0.0%7920 0.206 0.473 0.944
idle24:00:10.649 99.9%42077 936.678 2053.631 13047.283
nntp read00:00:00.904 0.0%41523 0.000 0.022 0.095
overview write00:00:05.022 0.0%6719 0.316 0.747 3.800
perl filter00:00:16.215 0.0%7919 1.023 2.048 12.556
python filter00:00:01.185 0.0%7919 0.035 0.150 0.944
site send00:00:00.382 0.0%13381 0.000 0.029 0.174
TOTAL: 1824:00:51.081100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.037 0.0%7692 0.000 0.005 0.200
article prepare00:00:00.001 0.0%29092 0.000 0.000 0.001
article read00:00:01.153 0.0%4724 0.000 0.244 1.333
backlog stats00:00:00.052 0.0%86667 0.000 0.001 0.010
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.627 0.0%49027 0.000 0.013 0.044
data write00:00:01.078 0.0%42689 0.000 0.025 0.081
idle23:59:49.244100.0%86667 298.008 996.795 6422.367
status file00:00:00.260 0.0%164 0.000 1.585 9.000
TOTAL: 923:59:52.452100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:11:37.118100.0%4204 18.500 165.823 12793.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.192 0.0%9373 0.000 0.020 0.500
readart00:00:00.046 0.0%65 0.000 0.708 1.000
TOTAL: 400:11:37.356100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 146
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 167

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 6 11745 4505 7151 89 38%46:21:57
2usenet.blueworldhosting.com 144 7817 1866 4848 1103 23%23:49:32
3newsfeed.endofthelinebbs.com 3 7116 149 6930 37 2%34:45:48
4news.sklaffkom.se 33 70 67 3 0 95%07:35:59
5news.tebibyte.org 2 494 2 492 0 0%04:47:19
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 213 27242 6589 19424 1229 24%117:20:35
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net13.4 MB58.6 KB358.1 KB13.9 MB 97%3.1 KB
2usenet.blueworldhosting.com11.0 MB0.0 KB1.5 MB12.5 MB 88%4.3 KB
3newsfeed.endofthelinebbs.com2.3 MB2.5 KB49.8 KB2.4 MB 97%13.1 KB
4news.sklaffkom.se210.4 KB0.0 KB0.0 KB210.4 KB100%3.1 KB
5news.tebibyte.org18.5 KB0.0 KB0.0 KB18.5 KB100%9.2 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 627.0 MB61.2 KB1.9 MB28.9 MB 93%3.8 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Sep 28 03:00:04 - 03:59:59 89 1.3% 0.02337.1 KB 1.2% 0.09
Sep 28 04:00:00 - 04:59:59 95 1.4% 0.03429.8 KB 1.6% 0.12
Sep 28 05:00:00 - 05:59:59 346 5.2% 0.101.4 MB 5.0% 0.38
Sep 28 06:00:00 - 06:59:59 267 4.0% 0.071007.0 KB 3.6% 0.28
Sep 28 07:00:00 - 07:59:59 156 2.3% 0.04549.5 KB 2.0% 0.15
Sep 28 08:00:00 - 08:59:59 199 3.0% 0.06669.8 KB 2.4% 0.19
Sep 28 09:00:00 - 09:59:59 306 4.6% 0.091.1 MB 3.9% 0.30
Sep 28 10:00:00 - 10:59:59 349 5.2% 0.101.2 MB 4.3% 0.33
Sep 28 11:00:00 - 11:59:59 341 5.1% 0.091.2 MB 4.6% 0.35
Sep 28 12:00:00 - 12:59:59 335 5.0% 0.091.1 MB 4.2% 0.32
Sep 28 13:00:00 - 13:59:59 359 5.3% 0.101.0 MB 3.8% 0.29
Sep 28 14:00:00 - 14:59:59 335 5.0% 0.091.4 MB 5.2% 0.40
Sep 28 15:00:00 - 15:59:59 284 4.2% 0.081.3 MB 4.9% 0.37
Sep 28 16:00:00 - 16:59:59 330 4.9% 0.091.1 MB 4.2% 0.32
Sep 28 17:00:00 - 17:59:59 382 5.7% 0.111.4 MB 5.2% 0.40
Sep 28 18:00:00 - 18:59:59 375 5.6% 0.101.5 MB 5.6% 0.43
Sep 28 19:00:00 - 19:59:59 362 5.4% 0.101.2 MB 4.4% 0.34
Sep 28 20:00:00 - 20:59:59 353 5.3% 0.101.2 MB 4.4% 0.34
Sep 28 21:00:00 - 21:59:59 298 4.4% 0.082.3 MB 8.6% 0.66
Sep 28 22:00:00 - 22:59:59 344 5.1% 0.101.8 MB 6.8% 0.52
Sep 28 23:00:00 - 23:59:59 239 3.6% 0.071016.2 KB 3.7% 0.28
Sep 29 00:00:00 - 00:59:59 241 3.6% 0.071.2 MB 4.5% 0.34
Sep 29 01:00:00 - 01:59:59 159 2.4% 0.04729.1 KB 2.6% 0.20
Sep 29 02:00:00 - 02:59:59 158 2.4% 0.04880.3 KB 3.2% 0.24
Sep 29 03:00:00 - 03:00:04 9 0.1% 2.258.9 KB 0.0% 2.23
TOTAL: 24:00:00 6711 100.0% 0.0827.0 MB 100.0% 0.32
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1103 362 0 0 0 0 0 0 741
2twilightnode-out.news.weretis.net 113 5 0 20 0 0 0 0 88
3newsfeed.endofthelinebbs.com 23 4 0 1 0 0 0 0 18
TOTAL: 3 1239 371 0 21 0 0 0 0 847

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 40
fido.fidotest 10
osnet.test 6
hispagatos.mastodon.tag.hacking 5
de.comp.office-pakete.ms-office.misc 3
chmurka.statystyki 2
de.comm.abuse 2
fido.ru.fidonet.today 2
alt.bbs.files-announce 1
alt.religion.jewish 1
alt.soc.germans 1
alt.test.1 1
alt.test.abc 1
fido.english_tutor 1
fido.ru.golded 1
hispagatos.mastodon.tag.hackers 1
local.general 1
realms.general 1
soc.culture.france 1
TOTAL: 22 371

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 643
Too many newsgroups 111
EMP (phn path) 49
User-issued cancel 20
HTML Multipart 4
Binary: misplaced binary 1
TOTAL: 6 828

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 18
TOTAL: 1 18
No colon-space in header field
usenet.blueworldhosting.com 1
TOTAL: 1 1
TOTAL: 2 19

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 9137 2557 3989 106 0 224 27%23:59:55
2sklaffkom.se 6752 905 2126 3621 0 2 13%23:59:55
3newsfeed.endofthelinebbs.com 11703 55 6466 33 0 677 0%23:59:24
4usenet.blueworldhosting.com 7661 1 4511 0 0 155 0%23:58:28
5weretis.net 2281 1 2207 0 0 0 0%23:59:44
TOTAL: 5 37534 3519 19299 3760 0 1058 9%119:57:26
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org6.3 MB1.6 MB7.9 MB0.1 KB/s3.0 KB23:59:55
2sklaffkom.se1.4 MB18.2 MB19.6 MB0.2 KB/s4.4 KB23:59:55
3newsfeed.endofthelinebbs.com186.4 KB103.9 KB290.3 KB0.0 KB/s3.3 KB23:59:24
4usenet.blueworldhosting.com2.9 KB0.0 KB2.9 KB0.0 KB/s2.9 KB23:58:28
5weretis.net2.9 KB0.0 KB2.9 KB0.0 KB/s2.9 KB23:59:44
TOTAL: 57.9 MB19.9 MB27.8 MB0.1 KB/s3.9 KB119:57:26
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
166.61.98.95 46 654.9 MB 10 0 000:10:56
TOTAL: 1 46 654.9 MB 10 0 000:10:56

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 49 654.9 MB 10 0 000:10:57
2*.66.censys-scanner.com 4 00.0 KB 0 0 000:00:09
3*.167.censys-scanner.com 3 00.0 KB 0 0 000:00:00
4*.infrawat.ch 2 00.0 KB 0 0 000:00:13
5*.probe.onyphe.net 2 00.0 KB 0 0 000:00:05
6*.stretchoid.com 2 00.0 KB 0 0 000:00:09
7*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 7 63 654.9 MB 10 0 000:11:37

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
66.61.98.95 0.576 1.474 0.00000:10:56
185-223-235-16.infrawat.ch 0.006 0.008 0.00000:00:12
azpdwsdp0d7g.stretchoid.com 0.015 0.015 0.00000:00:09
166.186.132.66.censys-scanner.com 0.023 0.033 0.00000:00:09
farrell.probe.onyphe.net 0.005 0.003 0.00000:00:03
r5-164-a4.monitoring.internet-measurement.com 0.004 0.010 0.00000:00:01
keanu.probe.onyphe.net 0.006 0.003 0.00000:00:01
60.146.94.167.censys-scanner.com 0.038 0.025 0.00000:00:00
205.210.31.111 0.005 0.017 0.00000:00:00
89-21-67-152.infrawat.ch 0.003 0.008 0.00000:00:00
87.251.64.19 0.006 0.017 0.00000:00:00
TOTAL: 11 0.687 1.613 0.00000:11:37

Curious NNRP explorers [Top 20]:

SystemConn
166.186.132.66.censys-scanner.com 4
60.146.94.167.censys-scanner.com 3
87.251.64.19 2
azpdwsdp0d7g.stretchoid.com 2
185-223-235-16.infrawat.ch 1
205.210.31.111 1
89-21-67-152.infrawat.ch 1
farrell.probe.onyphe.net 1
keanu.probe.onyphe.net 1
r5-164-a4.monitoring.internet-measurement.com 1
TOTAL: 10 17

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
87.251.64.19 9
keanu.probe.onyphe.net 3
60.146.94.167.censys-scanner.com 1
azpdwsdp0d7g.stretchoid.com 1
TOTAL: 4 14

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
#026#003#001#002 1
#026#003#003#002c#001 1
?#024?#011?#023 1
?$? ?#002#004#035a?9?r?#013B?g1n?:#020?>?#014?Q 1
?$?,?r?s?#023#002#023#001?#024?#007?#022?#023?'?/?#024?(?0?`?a... 1
Accept-Encoding: gzip, deflate, br 1
Accept-Language: en-US,en;q=0.9 1
Accept: text/html,application/xhtml+xml,... 1
Connection: close 1
EHLO www.censys.io 1
GET / HTTP/1.1 1
Host: 172.234.115.63:119 1
MGLNDD_172.234.115.63_119 1
User-Agent: Mozilla/5.0 (Windows NT 10.0... 1
TOTAL: 14 14

NNRP client timeouts [Top 20]:

SystemConnPeer
166.186.132.66.censys-scanner.com 1 4
60.146.94.167.censys-scanner.com 1 2
89-21-67-152.infrawat.ch 1 1
TOTAL: 3 3 8

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1microsoft 37 56.9%
2alt 19 29.2%
3junk 4 6.2%
4comp 2 3.1%
5pl 2 3.1%
6fr 1 1.5%
TOTAL: 6 65100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1microsoft.public.windowsxp.help_and_support 19
2microsoft.public.windowsxp.general 18
3alt.anonymous.messages 17
4junk 4
5comp.lang.c 2
6pl.misc.elektronika 2
7alt.religion.christianity 1
8alt.tv.big-brother 1
9fr.soc.politique 1
TOTAL: 9 65