Daily Usenet report

Oct 8 03:00:04 -- Oct 9 03:00:04

Unknown entries from news log file:

First 50 / 6220 lines (0.8%)

Oct 8 03:00:58 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Oct 8 03:11:23 twilightnode nnrpd[956535]: Reading access from /usr/local/news/etc/readers.conf
Oct 8 03:11:23 twilightnode nnrpd[956535]: Auth strategy 'localhost' does not match client. Removing.
Oct 8 03:11:23 twilightnode nnrpd[956535]: 66.61.98.95 res <anonymous>
Oct 8 03:11:23 twilightnode nnrpd[956535]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 8 03:11:23 twilightnode nnrpd[956535]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 8 03:11:23 twilightnode nnrpd[956535]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 8 03:11:23 twilightnode nnrpd[956535]: 66.61.98.95 no_post anonymous-read
Oct 8 03:11:23 twilightnode nnrpd[956536]: Reading access from /usr/local/news/etc/readers.conf
Oct 8 03:11:23 twilightnode nnrpd[956536]: Auth strategy 'localhost' does not match client. Removing.
Oct 8 03:11:23 twilightnode nnrpd[956536]: 66.61.98.95 res <anonymous>
Oct 8 03:11:23 twilightnode nnrpd[956536]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 8 03:11:23 twilightnode nnrpd[956536]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 8 03:11:23 twilightnode nnrpd[956536]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 8 03:11:23 twilightnode nnrpd[956536]: 66.61.98.95 no_post anonymous-read
Oct 8 03:13:12 twilightnode nnrpd[956552]: Reading access from /usr/local/news/etc/readers.conf
Oct 8 03:13:12 twilightnode nnrpd[956552]: Auth strategy 'localhost' does not match client. Removing.
Oct 8 03:13:12 twilightnode nnrpd[956552]: 66.61.98.95 res <anonymous>
Oct 8 03:13:12 twilightnode nnrpd[956552]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 8 03:13:12 twilightnode nnrpd[956552]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 8 03:13:12 twilightnode nnrpd[956552]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 8 03:13:12 twilightnode nnrpd[956552]: 66.61.98.95 no_post anonymous-read
Oct 8 03:13:12 twilightnode nnrpd[956553]: Reading access from /usr/local/news/etc/readers.conf
Oct 8 03:13:12 twilightnode nnrpd[956553]: Auth strategy 'localhost' does not match client. Removing.
Oct 8 03:13:12 twilightnode nnrpd[956553]: 66.61.98.95 res <anonymous>
Oct 8 03:13:12 twilightnode nnrpd[956553]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 8 03:13:12 twilightnode nnrpd[956553]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 8 03:13:12 twilightnode nnrpd[956553]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 8 03:13:12 twilightnode nnrpd[956553]: 66.61.98.95 no_post anonymous-read
Oct 8 03:16:30 twilightnode nnrpd[956671]: Reading access from /usr/local/news/etc/readers.conf
Oct 8 03:16:30 twilightnode nnrpd[956671]: Auth strategy 'localhost' does not match client. Removing.
Oct 8 03:16:30 twilightnode nnrpd[956671]: 66.61.98.95 res <anonymous>
Oct 8 03:16:30 twilightnode nnrpd[956671]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 8 03:16:30 twilightnode nnrpd[956671]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 8 03:16:30 twilightnode nnrpd[956671]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 8 03:16:30 twilightnode nnrpd[956671]: 66.61.98.95 no_post anonymous-read
Oct 8 03:16:30 twilightnode nnrpd[956672]: Reading access from /usr/local/news/etc/readers.conf
Oct 8 03:16:30 twilightnode nnrpd[956672]: Auth strategy 'localhost' does not match client. Removing.
Oct 8 03:16:30 twilightnode nnrpd[956672]: 66.61.98.95 res <anonymous>
Oct 8 03:16:30 twilightnode nnrpd[956672]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 8 03:16:30 twilightnode nnrpd[956672]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 8 03:16:30 twilightnode nnrpd[956672]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 8 03:16:30 twilightnode nnrpd[956672]: 66.61.98.95 no_post anonymous-read
Oct 8 03:21:44 twilightnode nnrpd[956957]: Reading access from /usr/local/news/etc/readers.conf
Oct 8 03:21:44 twilightnode nnrpd[956957]: Auth strategy 'localhost' does not match client. Removing.
Oct 8 03:21:44 twilightnode nnrpd[956957]: 66.61.98.95 res <anonymous>
Oct 8 03:21:44 twilightnode nnrpd[956957]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 8 03:21:44 twilightnode nnrpd[956957]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 8 03:21:44 twilightnode nnrpd[956957]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 8 03:21:44 twilightnode nnrpd[956957]: 66.61.98.95 no_post anonymous-read

Log entries by program:

Program nameLines%LinesSize%Size
nnrpd 25071 69.0%2.4 MB 56.6%
inn 7551 20.8%1.3 MB 30.9%
innd 2456 6.8%358.8 KB 8.3%
innfeed 1271 3.5%183.1 KB 4.2%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 36350 100.0%4.2 MB100.0%

History cache:

ReasonCount%Count
Positive hits 19943 51.8%
Negative hits 11054 28.7%
Do not exist 7491 19.5%
Cache misses 8 0.0%
TOTAL: 4 38496 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.096 0.0%46 0.875 2.087 11.000
article cleanup00:00:00.077 0.0%7533 0.000 0.010 0.072
article logging00:00:00.321 0.0%7562 0.000 0.042 0.206
article parse00:00:00.121 0.0%11566 0.000 0.010 0.077
article write00:00:05.913 0.0%6186 0.492 0.956 2.056
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.200 0.0%42206 0.000 0.005 0.065
hisgrep/artcncl00:00:00.031 0.0%46 0.000 0.674 2.000
hissync/artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.297 0.0%38711 0.052 0.111 0.792
history sync00:00:00.063 0.0%408 0.000 0.154 2.000
history write00:00:03.144 0.0%7533 0.172 0.417 0.971
idle24:00:25.671 99.9%43563 328.868 1983.924 9376.875
nntp read00:00:00.868 0.0%41332 0.000 0.021 0.081
overview write00:00:04.071 0.0%6186 0.192 0.658 2.722
perl filter00:00:12.589 0.0%7533 0.762 1.671 9.000
python filter00:00:00.942 0.0%7533 0.018 0.125 0.607
site send00:00:00.250 0.0%12327 0.000 0.020 0.083
TOTAL: 2024:00:58.654100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.027 0.0%6413 0.000 0.004 0.074
article prepare00:00:00.003 0.0%26772 0.000 0.000 0.007
article read00:00:00.912 0.0%4366 0.042 0.209 1.429
backlog stats00:00:00.048 0.0%82537 0.000 0.001 0.006
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.553 0.0%46172 0.000 0.012 0.035
data write00:00:00.946 0.0%40064 0.000 0.024 0.084
idle23:49:59.452100.0%82537 367.781 1039.527 3409.074
status file00:00:00.151 0.0%168 0.000 0.899 4.000
TOTAL: 923:50:02.092100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:51:31.200100.0%17823 59.500 173.439 10054.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.769 0.0%41825 0.000 0.018 1.000
readart00:00:00.109 0.0%373 0.000 0.292 1.000
TOTAL: 400:51:32.078100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 5 11337 4399 6818 120 38%49:24:23
2usenet.blueworldhosting.com 150 7403 1521 4691 1191 20%23:58:51
3newsfeed.endofthelinebbs.com 1 10273 274 9919 80 2%42:29:10
4news.sklaffkom.se 39 65 46 19 0 70%08:26:11
5news.tebibyte.org 2 1683 10 1673 0 0%12:16:09
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 222 30761 6250 23120 1391 20%136:34:44
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net13.1 MB0.0 KB494.7 KB13.6 MB 96%3.1 KB
2usenet.blueworldhosting.com9.6 MB0.0 KB1.8 MB11.4 MB 84%4.3 KB
3newsfeed.endofthelinebbs.com7.9 MB0.0 KB147.7 KB8.0 MB 98%23.2 KB
4news.tebibyte.org140.6 KB0.0 KB0.0 KB140.6 KB100%14.1 KB
5news.sklaffkom.se129.3 KB0.0 KB0.0 KB129.3 KB100%2.8 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 630.9 MB0.0 KB2.4 MB33.3 MB 92%4.5 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Oct 8 03:00:04 - 03:59:59 100 1.6% 0.03408.7 KB 1.3% 0.11
Oct 8 04:00:00 - 04:59:59 131 2.1% 0.04648.4 KB 2.1% 0.18
Oct 8 05:00:00 - 05:59:59 131 2.1% 0.04920.5 KB 3.0% 0.26
Oct 8 06:00:00 - 06:59:59 151 2.4% 0.04565.1 KB 1.8% 0.16
Oct 8 07:00:00 - 07:59:59 154 2.5% 0.04481.2 KB 1.6% 0.13
Oct 8 08:00:00 - 08:59:59 220 3.6% 0.06863.4 KB 2.8% 0.24
Oct 8 09:00:00 - 09:59:59 299 4.8% 0.081.1 MB 3.5% 0.30
Oct 8 10:00:00 - 10:59:59 321 5.2% 0.091.2 MB 4.0% 0.34
Oct 8 11:00:00 - 11:59:59 335 5.4% 0.091.4 MB 4.5% 0.38
Oct 8 12:00:00 - 12:59:59 345 5.6% 0.101.2 MB 4.1% 0.35
Oct 8 13:00:00 - 13:59:59 397 6.4% 0.116.2 MB 20.7% 1.76
Oct 8 14:00:00 - 14:59:59 310 5.0% 0.091.9 MB 6.3% 0.53
Oct 8 15:00:00 - 15:59:59 398 6.4% 0.111.3 MB 4.5% 0.38
Oct 8 16:00:00 - 16:59:59 340 5.5% 0.091.5 MB 5.1% 0.43
Oct 8 17:00:00 - 17:59:59 365 5.9% 0.101.3 MB 4.4% 0.37
Oct 8 18:00:00 - 18:59:59 323 5.2% 0.091.1 MB 3.7% 0.32
Oct 8 19:00:00 - 19:59:59 305 4.9% 0.081.1 MB 3.5% 0.30
Oct 8 20:00:00 - 20:59:59 299 4.8% 0.081.0 MB 3.4% 0.29
Oct 8 21:00:00 - 21:59:59 260 4.2% 0.071.4 MB 4.7% 0.40
Oct 8 22:00:00 - 22:59:59 210 3.4% 0.06727.4 KB 2.4% 0.20
Oct 8 23:00:00 - 23:59:59 261 4.2% 0.071.4 MB 4.7% 0.40
Oct 9 00:00:00 - 00:59:59 229 3.7% 0.061.2 MB 4.0% 0.34
Oct 9 01:00:00 - 01:59:59 151 2.4% 0.04552.3 KB 1.8% 0.15
Oct 9 02:00:00 - 02:59:59 132 2.1% 0.04598.9 KB 2.0% 0.17
Oct 9 03:00:00 - 03:00:04 9 0.1% 2.258.0 KB 0.0% 1.99
TOTAL: 24:00:00 6176 100.0% 0.0729.9 MB 100.0% 0.35
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1185 349 0 0 0 0 0 0 836
2twilightnode-out.news.weretis.net 145 18 0 0 0 0 0 0 127
3newsfeed.endofthelinebbs.com 45 3 0 0 0 0 0 0 42
TOTAL: 3 1375 370 0 0 0 0 0 0 1005

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 26
hispagatos.mastodon.tag.hacking 21
alt.politics.communism 3
clari.web.xcache.small 3
alt.2600.madrid 2
alt.paradox 2
alt.politics.cuba 2
fido.ru.home 2
pl.listserv.chomor-l 2
alt.autos.audi 1
alt.bbs.files-announce 1
alt.chat-programs.jabber 1
alt.fan.don-imus 1
alt.home.lawn.garden 1
alt.music 1
alt.politics.bush 1
alt.sex.telephone.ads 1
alt.test.test.a 1
alt.test.test.test 1
TOTAL: 29 370

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 774
EMP (phn path) 93
Too many newsgroups 83
User-issued cancel 10
Too many newsgroups (meow) 9
HTML Multipart 7
TOTAL: 6 976

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 29
TOTAL: 1 29
TOTAL: 1 29

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 8358 2261 3749 121 0 123 27%23:59:56
2sklaffkom.se 6185 1039 1844 3248 0 2 16%23:57:56
3newsfeed.endofthelinebbs.com 10761 23 5919 14 0 175 0%23:59:56
4weretis.net 1814 1 1782 0 0 0 0%23:56:14
5usenet.blueworldhosting.com 7512 0 4361 0 0 1 0%23:59:39
TOTAL: 5 34630 3324 17655 3383 0 301 9%119:53:41
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org5.8 MB1.2 MB7.0 MB0.1 KB/s3.0 KB23:59:56
2sklaffkom.se1.7 MB21.7 MB23.5 MB0.3 KB/s5.6 KB23:57:56
3newsfeed.endofthelinebbs.com54.3 KB43.0 KB97.2 KB0.0 KB/s2.6 KB23:59:56
4weretis.net1.3 KB0.0 KB1.3 KB0.0 KB/s1.3 KB23:56:14
5usenet.blueworldhosting.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:39
TOTAL: 57.6 MB23.0 MB30.6 MB0.1 KB/s4.7 KB119:53:41
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
166.61.98.95 502 2921.8 MB 90 0 000:36:21
22603:6010:6802:4ca5:1a03:73ff:fe28:be0f 370 812.5 MB 22 0 000:14:31
TOTAL: 2 872 3734.3 MB 112 0 000:50:53

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 878 3734.3 MB 112 0 000:51:14
2*.167.censys-scanner.com 3 00.0 KB 0 0 000:00:02
3*.infrawat.ch 2 00.0 KB 0 0 000:00:07
4*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:00
5*.bestsrv.de 1 00.0 KB 0 0 000:00:00
6*.census.shodan.io 1 00.0 KB 0 0 000:00:04
7*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 7 887 3734.3 MB 112 0 000:51:31

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
66.61.98.95 3.645 7.286 0.00000:36:21
2603:6010:6802:4ca5:1a03:73ff:fe28:be0f 2.291 4.249 0.00000:14:31
165.154.172.87 0.015 0.014 0.00000:00:10
40.119.27.186 0.010 0.020 0.00000:00:09
89-21-67-180.infrawat.ch 0.004 0.008 0.00000:00:07
pirate.census.shodan.io 0.004 0.007 0.00000:00:04
49.146.94.167.censys-scanner.com 0.042 0.026 0.00000:00:02
r4-145-91.monitoring.internet-measurement.com 0.005 0.011 0.00000:00:01
100.195.132.66.censys-scanner.com 0.050 0.016 0.00000:00:00
205.210.31.231 0.008 0.015 0.00000:00:00
v2202502253716312771.bestsrv.de 0.005 0.018 0.00000:00:00
45-133-173-180.infrawat.ch 0.004 0.013 0.00000:00:00
TOTAL: 12 6.083 11.683 0.00000:51:31

Curious NNRP explorers [Top 20]:

SystemConn
165.154.172.87 3
49.146.94.167.censys-scanner.com 3
40.119.27.186 2
100.195.132.66.censys-scanner.com 1
205.210.31.231 1
45-133-173-180.infrawat.ch 1
89-21-67-180.infrawat.ch 1
pirate.census.shodan.io 1
r4-145-91.monitoring.internet-measurement.com 1
v2202502253716312771.bestsrv.de 1
TOTAL: 10 15

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
v2202502253716312771.bestsrv.de 3
165.154.172.87 2
100.195.132.66.censys-scanner.com 1
40.119.27.186 1
49.146.94.167.censys-scanner.com 1
TOTAL: 5 8

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 2
#026#003#001 1
$4 1
*1 1
?#024 1
MGLNDD_172.234.115.63_119 1
PING 1
TOTAL: 7 8

NNRP client timeouts [Top 20]:

SystemConnPeer
49.146.94.167.censys-scanner.com 1 2
89-21-67-180.infrawat.ch 1 1
TOTAL: 2 2 5

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1linux 114 30.6%
2alt 90 24.1%
3free 72 19.3%
4it 18 4.8%
5aus 15 4.0%
6de 12 3.2%
7fr 9 2.4%
8rec 8 2.1%
9ger 7 1.9%
10uk 6 1.6%
11pl 5 1.3%
12junk 3 0.8%
13misc 3 0.8%
14comp 2 0.5%
15hfx 2 0.5%
16sci 2 0.5%
17talk 2 0.5%
18dk 1 0.3%
19it-alt 1 0.3%
20sac 1 0.3%
TOTAL: 20 373100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1linux.kernel.netdev 100
2free.pt 48
3alt.anonymous.messages 39
4free.usenet 24
5alt.test 19
6aus.cars 14
7alt.fan.rush-limbaugh 8
8fr.soc.politique 7
9ger.ct 7
10linux.kernel.git 7
11uk.rec.motorcycles 5
12alt.usenet.legends.lester-mosley 4
13de.etc.fahrzeug.auto 4
14de.soc.politik.misc 4
15rec.arts.sf.tv 4
16alt.arts.poetry.comments 3
17alt.buddha.short.fat.guy 3
18alt.russian.z1 3
19de.etc.sprache.deutsch 3
20it.politica 3
21junk 3
22linux.debian.bugs.dist 3
23linux.debian.bugs.rc 3
24pl.soc.polityka 3
25rec.arts.tv 3
26alt.politics.trump 2
27alt.prophecies.nostradamus 2
28hfx.general 2
29it.sport.calcio.milan 2
30misc.news.internet.discuss 2
31pl.soc.prawo 2
32sci.physics.relativity 2
33alt.bible 1
34alt.checkmate 1
35alt.christnet.bible 1
36alt.comp.software.firefox 1
37alt.support.diabetes 1
38alt.tv.survivor 1
39alt.usage.english 1
40aus.politics 1
41comp.lang.c 1
42comp.sys.ibm.pc.games.action 1
43de.comp.os.unix.linux.misc 1
44dk.politik 1
45fr.lettres.langue.francaise 1
46fr.sci.physique 1
47it-alt.test 1
48it.associazioni.cri 1
49it.comp.giochi.mud 1
50it.comp.giochi.sportivi 1
51it.comp.software.irc 1
52it.cultura.religioni 1
53it.discussioni.auto 1
54it.discussioni.commercialisti 1
55it.hobby.fai-da-te 1
56it.industria.elettrotecnica.normative 1
57it.sociale.obiezione 1
58it.sport.calcio.inter-fc 1
59it.sport.calcio.torino 1
60it.test 1
61linux.debian.user 1
62misc.phone.mobile.iphone 1
63rec.bicycles.tech 1
64sac.politics 1
65talk.origins 1
66talk.politics.guns 1
67uk.politics.misc 1
TOTAL: 67 373