Daily Usenet report

Oct 2 03:00:04 -- Oct 3 03:00:04

Unknown entries from news log file:

First 50 / 4827 lines (1.0%)

Oct 2 03:01:16 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Oct 2 03:07:09 twilightnode nnrpd[511994]: Reading access from /usr/local/news/etc/readers.conf
Oct 2 03:07:09 twilightnode nnrpd[511994]: Auth strategy 'localhost' does not match client. Removing.
Oct 2 03:07:09 twilightnode nnrpd[511994]: 66.61.98.95 res <anonymous>
Oct 2 03:07:09 twilightnode nnrpd[511994]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 2 03:07:09 twilightnode nnrpd[511994]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 2 03:07:09 twilightnode nnrpd[511994]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 2 03:07:09 twilightnode nnrpd[511994]: 66.61.98.95 no_post anonymous-read
Oct 2 03:07:10 twilightnode nnrpd[511995]: Reading access from /usr/local/news/etc/readers.conf
Oct 2 03:07:10 twilightnode nnrpd[511995]: Auth strategy 'localhost' does not match client. Removing.
Oct 2 03:07:10 twilightnode nnrpd[511995]: 66.61.98.95 res <anonymous>
Oct 2 03:07:10 twilightnode nnrpd[511995]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 2 03:07:10 twilightnode nnrpd[511995]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 2 03:07:10 twilightnode nnrpd[511995]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 2 03:07:10 twilightnode nnrpd[511995]: 66.61.98.95 no_post anonymous-read
Oct 2 03:11:22 twilightnode nnrpd[512197]: Reading access from /usr/local/news/etc/readers.conf
Oct 2 03:11:22 twilightnode nnrpd[512197]: Auth strategy 'localhost' does not match client. Removing.
Oct 2 03:11:22 twilightnode nnrpd[512197]: 66.61.98.95 res <anonymous>
Oct 2 03:11:22 twilightnode nnrpd[512197]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 2 03:11:22 twilightnode nnrpd[512197]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 2 03:11:22 twilightnode nnrpd[512197]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 2 03:11:22 twilightnode nnrpd[512197]: 66.61.98.95 no_post anonymous-read
Oct 2 03:11:23 twilightnode nnrpd[512198]: Reading access from /usr/local/news/etc/readers.conf
Oct 2 03:11:23 twilightnode nnrpd[512198]: Auth strategy 'localhost' does not match client. Removing.
Oct 2 03:11:23 twilightnode nnrpd[512198]: 66.61.98.95 res <anonymous>
Oct 2 03:11:23 twilightnode nnrpd[512198]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 2 03:11:23 twilightnode nnrpd[512198]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 2 03:11:23 twilightnode nnrpd[512198]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 2 03:11:23 twilightnode nnrpd[512198]: 66.61.98.95 no_post anonymous-read
Oct 2 03:12:08 twilightnode nnrpd[512211]: Reading access from /usr/local/news/etc/readers.conf
Oct 2 03:12:08 twilightnode nnrpd[512211]: Auth strategy 'localhost' does not match client. Removing.
Oct 2 03:12:08 twilightnode nnrpd[512211]: 66.61.98.95 res <anonymous>
Oct 2 03:12:08 twilightnode nnrpd[512211]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 2 03:12:08 twilightnode nnrpd[512211]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 2 03:12:08 twilightnode nnrpd[512211]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 2 03:12:08 twilightnode nnrpd[512211]: 66.61.98.95 no_post anonymous-read
Oct 2 03:12:09 twilightnode nnrpd[512212]: Reading access from /usr/local/news/etc/readers.conf
Oct 2 03:12:09 twilightnode nnrpd[512212]: Auth strategy 'localhost' does not match client. Removing.
Oct 2 03:12:09 twilightnode nnrpd[512212]: 66.61.98.95 res <anonymous>
Oct 2 03:12:09 twilightnode nnrpd[512212]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 2 03:12:09 twilightnode nnrpd[512212]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 2 03:12:09 twilightnode nnrpd[512212]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 2 03:12:09 twilightnode nnrpd[512212]: 66.61.98.95 no_post anonymous-read
Oct 2 03:13:10 twilightnode nnrpd[512218]: Reading access from /usr/local/news/etc/readers.conf
Oct 2 03:13:10 twilightnode nnrpd[512218]: Auth strategy 'localhost' does not match client. Removing.
Oct 2 03:13:10 twilightnode nnrpd[512218]: 66.61.98.95 res <anonymous>
Oct 2 03:13:10 twilightnode nnrpd[512218]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 2 03:13:10 twilightnode nnrpd[512218]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 2 03:13:10 twilightnode nnrpd[512218]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 2 03:13:10 twilightnode nnrpd[512218]: 66.61.98.95 no_post anonymous-read

Log entries by program:

Program nameLines%LinesSize%Size
nnrpd 12366 52.4%1.1 MB 37.5%
inn 7524 31.9%1.3 MB 44.3%
innd 2455 10.4%345.4 KB 11.5%
innfeed 1271 5.4%202.6 KB 6.7%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 23617 100.0%2.9 MB100.0%

History cache:

ReasonCount%Count
Positive hits 19575 50.8%
Negative hits 11407 29.6%
Do not exist 7475 19.4%
Cache misses 53 0.1%
TOTAL: 4 38510 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.053 0.0%20 1.000 2.650 11.000
article cleanup00:00:00.105 0.0%7496 0.000 0.014 0.429
article logging00:00:00.373 0.0%7526 0.000 0.050 0.231
article parse00:00:00.135 0.0%11321 0.000 0.012 0.143
article write00:00:06.811 0.0%6185 0.604 1.101 2.968
artlog/artparse00:00:00.000 0.0%1 0.000 0.000 0.000
data move00:00:00.270 0.0%41840 0.000 0.006 0.053
hisgrep/artcncl00:00:00.017 0.0%20 0.000 0.850 1.100
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:05.134 0.0%38621 0.062 0.133 2.133
history sync00:00:00.077 0.0%415 0.000 0.186 1.000
history write00:00:03.733 0.0%7497 0.200 0.498 1.200
idle24:00:14.069 99.9%42927 675.517 2013.047 15003.975
nntp read00:00:00.929 0.0%41086 0.000 0.023 0.072
overview write00:00:05.193 0.0%6185 0.365 0.840 2.880
perl filter00:00:15.767 0.0%7496 1.011 2.103 9.333
python filter00:00:01.204 0.0%7496 0.000 0.161 0.852
site send00:00:00.308 0.0%12329 0.000 0.025 0.116
TOTAL: 1824:00:54.178100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.035 0.0%6452 0.000 0.005 0.130
article prepare00:00:00.003 0.0%28212 0.000 0.000 0.010
article read00:00:01.107 0.0%4512 0.000 0.245 1.000
backlog stats00:00:00.059 0.0%81802 0.000 0.001 0.013
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.618 0.0%46240 0.000 0.013 0.045
data write00:00:01.023 0.0%40127 0.000 0.025 0.071
idle23:59:18.607100.0%81802 306.150 1055.703 8988.373
status file00:00:00.140 0.0%172 0.000 0.814 2.000
TOTAL: 923:59:21.592100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:18:20.904100.0%5846 68.500 188.317 9820.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.251 0.0%14217 0.000 0.018 0.500
readart00:00:00.012 0.0%30 0.000 0.400 0.583
TOTAL: 400:18:21.167100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 5 11233 4080 7113 40 36%47:46:43
2usenet.blueworldhosting.com 144 7348 1716 4376 1256 23%23:49:30
3newsfeed.endofthelinebbs.com 3 8298 207 8047 44 2%34:42:45
4news.tebibyte.org 2 4092 107 3983 2 2%23:57:57
5news.sklaffkom.se 46 94 90 4 0 95%10:46:37
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 225 31065 6200 23523 1342 19%141:03:32
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net12.1 MB0.0 KB90.2 KB12.2 MB 99%3.0 KB
2usenet.blueworldhosting.com8.2 MB0.0 KB1.5 MB9.7 MB 84%3.3 KB
3newsfeed.endofthelinebbs.com6.3 MB0.0 KB73.9 KB6.4 MB 98%26.1 KB
4news.tebibyte.org442.2 KB0.0 KB3.3 KB445.4 KB 99%4.1 KB
5news.sklaffkom.se279.3 KB0.0 KB0.0 KB279.3 KB100%3.1 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 627.3 MB0.0 KB1.7 MB29.0 MB 94%3.9 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Oct 2 03:00:04 - 03:59:59 118 1.9% 0.03559.6 KB 1.8% 0.16
Oct 2 04:00:00 - 04:59:59 162 2.6% 0.042.7 MB 9.1% 0.78
Oct 2 05:00:00 - 05:59:59 129 2.1% 0.04581.4 KB 1.9% 0.16
Oct 2 06:00:00 - 06:59:59 147 2.4% 0.04684.8 KB 2.2% 0.19
Oct 2 07:00:00 - 07:59:59 162 2.6% 0.04550.1 KB 1.8% 0.15
Oct 2 08:00:00 - 08:59:59 214 3.5% 0.06591.2 KB 1.9% 0.16
Oct 2 09:00:00 - 09:59:59 332 5.4% 0.091.2 MB 4.0% 0.34
Oct 2 10:00:00 - 10:59:59 313 5.1% 0.091.1 MB 3.8% 0.33
Oct 2 11:00:00 - 11:59:59 401 6.5% 0.111.5 MB 5.1% 0.44
Oct 2 12:00:00 - 12:59:59 365 5.9% 0.101.2 MB 4.1% 0.35
Oct 2 13:00:00 - 13:59:59 263 4.3% 0.071.2 MB 4.2% 0.35
Oct 2 14:00:00 - 14:59:59 322 5.2% 0.091.2 MB 4.0% 0.34
Oct 2 15:00:00 - 15:59:59 380 6.1% 0.111.4 MB 4.5% 0.39
Oct 2 16:00:00 - 16:59:59 375 6.1% 0.101.7 MB 5.5% 0.47
Oct 2 17:00:00 - 17:59:59 403 6.5% 0.111.5 MB 5.0% 0.43
Oct 2 18:00:00 - 18:59:59 318 5.1% 0.091.1 MB 3.8% 0.32
Oct 2 19:00:00 - 19:59:59 274 4.4% 0.08939.7 KB 3.1% 0.26
Oct 2 20:00:00 - 20:59:59 248 4.0% 0.07783.4 KB 2.6% 0.22
Oct 2 21:00:00 - 21:59:59 288 4.7% 0.081.0 MB 3.5% 0.30
Oct 2 22:00:00 - 22:59:59 304 4.9% 0.082.6 MB 8.7% 0.74
Oct 2 23:00:00 - 23:59:59 238 3.8% 0.071.1 MB 3.7% 0.31
Oct 3 00:00:00 - 00:59:59 164 2.7% 0.05626.4 KB 2.0% 0.17
Oct 3 01:00:00 - 01:59:59 180 2.9% 0.053.9 MB 12.9% 1.10
Oct 3 02:00:00 - 02:59:59 72 1.2% 0.02225.5 KB 0.7% 0.06
Oct 3 03:00:00 - 03:00:04 10 0.2% 2.5010.8 KB 0.0% 2.69
TOTAL: 24:00:00 6182 100.0% 0.0730.0 MB 100.0% 0.36
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1256 325 0 0 0 0 0 0 931
2twilightnode-out.news.weretis.net 59 8 0 0 0 0 0 0 51
3newsfeed.endofthelinebbs.com 27 2 0 0 0 0 0 0 25
TOTAL: 3 1342 335 0 0 0 0 0 0 1007

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 21
hispagatos.mastodon.tag.hacking 6
fr.rec.son-image.hifi 3
newsgrouper.support 3
fido.su.pol 2
alt.bbs.files-announce 1
alt.crackers 1
alt.magic.secrets 1
alt.sex.pedophilia 1
alt.startrek.tos.trekmuse 1
chmurka.statystyki 1
chmurka.test 1
fido.ru.home 1
lada.auto 1
microsoft.public.es.vfoxpro.lenguaje 1
pl.comp.www 1
pt.soc.geral 1
TOTAL: 18 335

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 887
Too many newsgroups 76
User-issued cancel 9
HTML Multipart 2
Too many newsgroups (meow) 2
TOTAL: 5 976

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 30
TOTAL: 1 30
No colon-space in header field
usenet.blueworldhosting.com 1
TOTAL: 1 1
TOTAL: 2 31

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 8228 2559 3473 108 0 15 31%23:59:31
2sklaffkom.se 6282 1099 1818 3223 0 1 17%23:59:45
3newsfeed.endofthelinebbs.com 10662 64 5880 14 0 291 0%23:59:57
4usenet.blueworldhosting.com 7048 0 4163 0 0 24 0%23:59:36
5weretis.net 2149 0 2086 0 0 0 0%23:58:55
TOTAL: 5 34369 3722 17420 3345 0 331 10%119:57:44
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org6.4 MB1022.7 KB7.4 MB0.1 KB/s2.8 KB23:59:31
2sklaffkom.se1.8 MB21.7 MB23.5 MB0.3 KB/s5.6 KB23:59:45
3newsfeed.endofthelinebbs.com208.2 KB35.8 KB244.1 KB0.0 KB/s3.1 KB23:59:57
4usenet.blueworldhosting.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:36
5weretis.net0.0 KB0.0 KB0.0 KB0.0 KB/s023:58:55
TOTAL: 58.4 MB22.7 MB31.1 MB0.1 KB/s4.5 KB119:57:44
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
166.61.98.95 674 301.4 MB 6 0 000:17:57
TOTAL: 1 674 301.4 MB 6 0 000:17:57

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 680 301.4 MB 6 0 000:18:13
2*.199.censys-scanner.com 3 00.0 KB 0 0 000:00:02
3*.infrawat.ch 2 00.0 KB 0 0 000:00:00
4*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:01
5*.ip-94-23-40.eu 1 00.0 KB 0 0 000:00:00
6*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 6 688 301.4 MB 6 0 000:18:20

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
66.61.98.95 4.113 5.722 0.00000:17:57
20.83.41.25 0.016 0.024 0.00000:00:09
217.60.76.226 0.004 0.012 0.00000:00:04
45.155.45.199.censys-scanner.com 0.049 0.037 0.00000:00:02
r4-212-d4.monitoring.internet-measurement.com 0.004 0.011 0.00000:00:01
71.195.132.66.censys-scanner.com 0.029 0.017 0.00000:00:01
94.154.43.21 0.005 0.009 0.00000:00:00
89-21-67-141.infrawat.ch 0.003 0.011 0.00000:00:00
205.210.31.77 0.006 0.009 0.00000:00:00
205.210.31.97 0.007 0.012 0.00000:00:00
ns369570.ip-94-23-40.eu 0.004 0.005 0.00000:00:00
185-223-235-9.infrawat.ch 0.007 0.005 0.00000:00:00
TOTAL: 12 4.247 5.874 0.00000:18:20

Curious NNRP explorers [Top 20]:

SystemConn
45.155.45.199.censys-scanner.com 3
20.83.41.25 2
185-223-235-9.infrawat.ch 1
205.210.31.77 1
205.210.31.97 1
217.60.76.226 1
71.195.132.66.censys-scanner.com 1
89-21-67-141.infrawat.ch 1
94.154.43.21 1
ns369570.ip-94-23-40.eu 1
r4-212-d4.monitoring.internet-measurement.com 1
TOTAL: 11 14

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
20.83.41.25 1
217.60.76.226 1
45.155.45.199.censys-scanner.com 1
71.195.132.66.censys-scanner.com 1
TOTAL: 4 4

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 2
MGLNDD_172.234.115.63_119 1
SSH-2.0-OpenSSH_10.2 1
TOTAL: 3 4

NNRP client timeouts [Top 20]:

SystemConnPeer
185-223-235-9.infrawat.ch 1 1
45.155.45.199.censys-scanner.com 1 2
TOTAL: 2 2 7

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1alt 12 40.0%
2microsoft 12 40.0%
3nl 2 6.7%
4seattle 2 6.7%
5linux 1 3.3%
6misc 1 3.3%
TOTAL: 6 30100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1alt.anonymous.messages 12
2microsoft.public.windowsxp.help_and_support 12
3nl.newsgroups.announce 2
4seattle.politics 2
5linux.debian.user 1
6misc.survivalism 1
TOTAL: 6 30