Daily Usenet report

Oct 9 03:00:05 -- Oct 10 03:00:05

Unknown entries from news log file:

First 50 / 11834 lines (0.4%)

Oct 9 03:01:14 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Oct 9 03:04:19 twilightnode nnrpd[1027833]: Reading access from /usr/local/news/etc/readers.conf
Oct 9 03:04:19 twilightnode nnrpd[1027833]: Auth strategy 'localhost' does not match client. Removing.
Oct 9 03:04:19 twilightnode nnrpd[1027833]: 66.61.98.95 res <anonymous>
Oct 9 03:04:19 twilightnode nnrpd[1027833]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 9 03:04:19 twilightnode nnrpd[1027833]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 9 03:04:19 twilightnode nnrpd[1027833]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 9 03:04:19 twilightnode nnrpd[1027833]: 66.61.98.95 no_post anonymous-read
Oct 9 03:04:19 twilightnode nnrpd[1027834]: Reading access from /usr/local/news/etc/readers.conf
Oct 9 03:04:19 twilightnode nnrpd[1027834]: Auth strategy 'localhost' does not match client. Removing.
Oct 9 03:04:19 twilightnode nnrpd[1027834]: 66.61.98.95 res <anonymous>
Oct 9 03:04:19 twilightnode nnrpd[1027834]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 9 03:04:19 twilightnode nnrpd[1027834]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 9 03:04:19 twilightnode nnrpd[1027834]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 9 03:04:19 twilightnode nnrpd[1027834]: 66.61.98.95 no_post anonymous-read
Oct 9 03:08:00 twilightnode nnrpd[1027997]: Reading access from /usr/local/news/etc/readers.conf
Oct 9 03:08:00 twilightnode nnrpd[1027997]: Auth strategy 'localhost' does not match client. Removing.
Oct 9 03:08:00 twilightnode nnrpd[1027997]: 66.61.98.95 res <anonymous>
Oct 9 03:08:00 twilightnode nnrpd[1027997]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 9 03:08:00 twilightnode nnrpd[1027997]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 9 03:08:00 twilightnode nnrpd[1027997]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 9 03:08:00 twilightnode nnrpd[1027997]: 66.61.98.95 no_post anonymous-read
Oct 9 03:08:01 twilightnode nnrpd[1027998]: Reading access from /usr/local/news/etc/readers.conf
Oct 9 03:08:01 twilightnode nnrpd[1027998]: Auth strategy 'localhost' does not match client. Removing.
Oct 9 03:08:01 twilightnode nnrpd[1027998]: 66.61.98.95 res <anonymous>
Oct 9 03:08:01 twilightnode nnrpd[1027998]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 9 03:08:01 twilightnode nnrpd[1027998]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 9 03:08:01 twilightnode nnrpd[1027998]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 9 03:08:01 twilightnode nnrpd[1027998]: 66.61.98.95 no_post anonymous-read
Oct 9 03:08:35 twilightnode nnrpd[1028014]: Reading access from /usr/local/news/etc/readers.conf
Oct 9 03:08:35 twilightnode nnrpd[1028014]: Auth strategy 'localhost' does not match client. Removing.
Oct 9 03:08:35 twilightnode nnrpd[1028014]: 66.61.98.95 res <anonymous>
Oct 9 03:08:35 twilightnode nnrpd[1028014]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 9 03:08:35 twilightnode nnrpd[1028014]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 9 03:08:35 twilightnode nnrpd[1028014]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 9 03:08:35 twilightnode nnrpd[1028014]: 66.61.98.95 no_post anonymous-read
Oct 9 03:08:35 twilightnode nnrpd[1028015]: Reading access from /usr/local/news/etc/readers.conf
Oct 9 03:08:35 twilightnode nnrpd[1028015]: Auth strategy 'localhost' does not match client. Removing.
Oct 9 03:08:35 twilightnode nnrpd[1028015]: 66.61.98.95 res <anonymous>
Oct 9 03:08:35 twilightnode nnrpd[1028015]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 9 03:08:35 twilightnode nnrpd[1028015]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 9 03:08:35 twilightnode nnrpd[1028015]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 9 03:08:35 twilightnode nnrpd[1028015]: 66.61.98.95 no_post anonymous-read
Oct 9 03:09:20 twilightnode nnrpd[1028225]: Reading access from /usr/local/news/etc/readers.conf
Oct 9 03:09:20 twilightnode nnrpd[1028225]: Auth strategy 'localhost' does not match client. Removing.
Oct 9 03:09:20 twilightnode nnrpd[1028225]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f res <anonymous>
Oct 9 03:09:20 twilightnode nnrpd[1028225]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f no_match_user <anonymous> <localhost>
Oct 9 03:09:20 twilightnode nnrpd[1028225]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 9 03:09:20 twilightnode nnrpd[1028225]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f match_user <anonymous> <anonymous>
Oct 9 03:09:20 twilightnode nnrpd[1028225]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f no_post anonymous-read

Log entries by program:

Program nameLines%LinesSize%Size
nnrpd 19852 59.7%2.1 MB 50.4%
inn 7447 22.4%1.3 MB 30.3%
innd 4669 14.0%651.8 KB 15.0%
innfeed 1268 3.8%189.2 KB 4.3%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 33237 100.0%4.2 MB100.0%

History cache:

ReasonCount%Count
Positive hits 18852 51.6%
Negative hits 10334 28.3%
Do not exist 7366 20.2%
Cache misses 1 0.0%
TOTAL: 4 36553 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.058 0.0%18 0.000 3.222 21.000
article cleanup00:00:00.112 0.0%7391 0.000 0.015 0.143
article logging00:00:00.332 0.0%7450 0.000 0.045 0.182
article parse00:00:00.199 0.0%13825 0.000 0.014 0.136
article write00:00:06.999 0.0%6051 0.539 1.157 2.500
artlog/artparse00:00:00.000 0.0%1 0.000 0.000 0.000
artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.342 0.0%43889 0.000 0.008 0.053
hisgrep/artcncl00:00:00.012 0.0%18 0.000 0.667 2.000
hissync/artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.914 0.0%36674 0.075 0.134 0.336
history sync00:00:00.073 0.0%411 0.000 0.178 2.333
history write00:00:03.598 0.0%7392 0.167 0.487 0.909
idle24:00:17.477 99.9%46845 318.235 1844.753 7898.237
nntp read00:00:00.957 0.0%42454 0.004 0.023 0.067
overview write00:00:04.865 0.0%6051 0.258 0.804 4.000
perl filter00:00:17.910 0.0%7391 0.842 2.423 14.615
python filter00:00:01.327 0.0%7391 0.000 0.180 1.214
site send00:00:00.377 0.0%12030 0.000 0.031 0.167
TOTAL: 2024:00:59.552100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.027 0.0%6442 0.000 0.004 0.100
article prepare00:00:00.002 0.0%26596 0.000 0.000 0.012
article read00:00:01.318 0.0%4326 0.000 0.305 3.167
backlog stats00:00:00.063 0.0%78558 0.000 0.001 0.048
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.618 0.0%44462 0.000 0.014 0.071
data write00:00:01.017 0.0%38507 0.000 0.026 0.070
idle23:50:38.305100.0%78558 346.297 1092.674 4056.932
status file00:00:00.240 0.0%170 0.000 1.412 23.000
TOTAL: 923:50:41.590100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:15:33.946100.0%2298 71.500 406.417 9860.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.177 0.0%5949 0.000 0.030 2.667
readart00:00:00.039 0.0%25 0.000 1.560 2.533
TOTAL: 400:15:34.162100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 3 10027 4121 5782 124 41%44:31:13
2usenet.blueworldhosting.com 713 7097 1086 4918 1093 15%23:42:38
3newsfeed.endofthelinebbs.com 2 3727 354 3292 81 9%17:02:25
4news.tebibyte.org 4 3541 174 3358 9 4%23:19:38
5news.sklaffkom.se 35 63 46 16 1 73%07:42:26
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 782 24455 5781 17366 1308 23%116:18:20
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1newsfeed.endofthelinebbs.com14.7 MB0.0 KB123.8 KB14.8 MB 99%34.9 KB
2twilightnode-out.news.weretis.net13.1 MB0.0 KB510.3 KB13.6 MB 96%3.3 KB
3usenet.blueworldhosting.com7.2 MB0.0 KB1.5 MB8.7 MB 82%4.1 KB
4news.tebibyte.org470.3 KB0.0 KB9.1 KB479.4 KB 98%2.6 KB
5news.sklaffkom.se176.1 KB0.0 KB2.6 KB178.7 KB 98%3.8 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 635.6 MB0.0 KB2.1 MB37.7 MB 94%5.4 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Oct 9 03:00:05 - 03:59:59 117 1.9% 0.03679.6 KB 1.6% 0.19
Oct 9 04:00:00 - 04:59:59 119 2.0% 0.03409.8 KB 1.0% 0.11
Oct 9 05:00:00 - 05:59:59 79 1.3% 0.02333.1 KB 0.8% 0.09
Oct 9 06:00:00 - 06:59:59 105 1.7% 0.03295.6 KB 0.7% 0.08
Oct 9 07:00:00 - 07:59:59 163 2.7% 0.05705.1 KB 1.7% 0.20
Oct 9 08:00:00 - 08:59:59 274 4.5% 0.08919.7 KB 2.2% 0.26
Oct 9 09:00:00 - 09:59:59 298 4.9% 0.08903.4 KB 2.1% 0.25
Oct 9 10:00:00 - 10:59:59 325 5.4% 0.091.3 MB 3.0% 0.36
Oct 9 11:00:00 - 11:59:59 350 5.8% 0.101.2 MB 2.9% 0.34
Oct 9 12:00:00 - 12:59:59 363 6.0% 0.101.3 MB 3.0% 0.36
Oct 9 13:00:00 - 13:59:59 289 4.8% 0.081.1 MB 2.7% 0.32
Oct 9 14:00:00 - 14:59:59 318 5.3% 0.091.4 MB 3.3% 0.40
Oct 9 15:00:00 - 15:59:59 459 7.6% 0.1313.4 MB 32.2% 3.82
Oct 9 16:00:00 - 16:59:59 344 5.7% 0.101.5 MB 3.7% 0.44
Oct 9 17:00:00 - 17:59:59 323 5.3% 0.091.7 MB 4.0% 0.48
Oct 9 18:00:00 - 18:59:59 330 5.5% 0.091.7 MB 4.0% 0.47
Oct 9 19:00:00 - 19:59:59 366 6.0% 0.101.5 MB 3.5% 0.42
Oct 9 20:00:00 - 20:59:59 279 4.6% 0.082.1 MB 5.0% 0.59
Oct 9 21:00:00 - 21:59:59 260 4.3% 0.071.2 MB 2.9% 0.35
Oct 9 22:00:00 - 22:59:59 254 4.2% 0.071.1 MB 2.6% 0.31
Oct 9 23:00:00 - 23:59:59 153 2.5% 0.04800.0 KB 1.9% 0.22
Oct 10 00:00:00 - 00:59:59 200 3.3% 0.062.5 MB 6.0% 0.71
Oct 10 01:00:00 - 01:59:59 114 1.9% 0.03390.0 KB 0.9% 0.11
Oct 10 02:00:00 - 02:59:59 158 2.6% 0.043.5 MB 8.4% 0.99
Oct 10 03:00:00 - 03:00:05 10 0.2% 2.009.8 KB 0.0% 1.97
TOTAL: 24:00:00 6050 100.0% 0.0741.7 MB 100.0% 0.49
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1094 372 0 0 1 0 0 0 721
2twilightnode-out.news.weretis.net 195 9 0 0 0 0 0 0 186
3newsfeed.endofthelinebbs.com 96 0 0 0 0 0 0 0 96
4news.tebibyte.org 11 0 0 0 0 0 0 0 11
5news.sklaffkom.se 1 0 0 0 0 0 0 0 1
TOTAL: 5 1397 381 0 0 1 0 0 0 1015

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 74
hispagatos.mastodon.tag.hacking 5
newsreader.test 3
alt.bbs.files-announce 1
alt.fan.states.new-mexico 1
alt.it.amici.lisolachenonce 1
alt.sports.basketball.nba.la-lakers 1
alt.test.test.a 1
chmurka.statystyki 1
fido.english_tutor 1
fr.soc.divers 1
hispagatos.mastodon.tag.hackers 1
lada.auto 1
pl.listserv.chomor-l 1
TOTAL: 15 381

Supposedly-moderated groups with unmoderated postings [Top 20]:

GroupsCount
uk.religion.christian 1
TOTAL: 1 1

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 734
EMP (phn path) 90
Too many newsgroups 75
User-issued cancel 41
Too many newsgroups (meow) 10
hierarchy violation - crosspost outside netscape 3
HTML Multipart 1
MI5 Filter 1
TOTAL: 8 955

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 59
TOTAL: 1 59
No colon-space in header field
usenet.blueworldhosting.com 1
TOTAL: 1 1
TOTAL: 2 60

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 7915 2326 3592 65 0 35 29%23:59:55
2sklaffkom.se 6051 1159 1738 3082 0 1 19%23:58:44
3newsfeed.endofthelinebbs.com 10463 18 5431 13 0 442 0%23:58:58
4weretis.net 1828 6 1780 0 0 0 0%23:55:25
5usenet.blueworldhosting.com 7218 0 4506 0 0 12 0%23:59:55
TOTAL: 5 33475 3509 17047 3160 0 490 10%119:52:57
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org5.9 MB363.2 KB6.2 MB0.1 KB/s2.7 KB23:59:55
2sklaffkom.se2.0 MB32.9 MB34.9 MB0.4 KB/s8.4 KB23:58:44
3newsfeed.endofthelinebbs.com55.3 KB44.0 KB99.3 KB0.0 KB/s3.2 KB23:58:58
4weretis.net11.6 KB0.0 KB11.6 KB0.0 KB/s1.9 KB23:55:25
5usenet.blueworldhosting.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:55
TOTAL: 57.9 MB33.3 MB41.2 MB0.1 KB/s6.3 KB119:52:57
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
12603:6010:6802:4ca5:1a03:73ff:fe28:be0f 780 2572.4 KB 10 0 000:07:33
TOTAL: 1 780 2572.4 KB 10 0 000:07:33

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved1674 2572.4 KB 10 0 000:14:55
2*.66.censys-scanner.com 8 00.0 KB 0 0 000:00:23
3*.infrawat.ch 2 00.0 KB 0 0 000:00:00
4*.internet-census.org 1 00.0 KB 0 0 000:00:10
5*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
6*.ptr.pfcloud.network 1 00.0 KB 0 0 000:00:00
7*.scanner.modat.io 1 00.0 KB 0 0 000:00:00
8*.shodan.io 1 00.0 KB 0 0 000:00:00
TOTAL: 81689 2572.4 KB 10 0 000:15:33

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
2603:6010:6802:4ca5:1a03:73ff:fe28:be0f 3.996 6.052 0.00000:07:33
66.61.98.95 4.392 6.559 0.00000:07:12
zl-amsc-nl-gp1-wk118c.internet-census.org 0.006 0.005 0.00000:00:10
40.124.171.144 0.012 0.021 0.00000:00:10
232.224.132.66.censys-scanner.com 0.009 0.023 0.00000:00:08
245.224.132.66.censys-scanner.com 0.042 0.020 0.00000:00:07
184.186.132.66.censys-scanner.com 0.040 0.029 0.00000:00:06
r3-88-58.monitoring.internet-measurement.com 0.005 0.013 0.00000:00:01
census12.shodan.io 0.013 0.013 0.00000:00:00
176.65.149.188.ptr.pfcloud.network 0.009 0.010 0.00000:00:00
o012.scanner.modat.io 0.002 0.012 0.00000:00:00
195-206-182-196.infrawat.ch 0.005 0.007 0.00000:00:00
93.123.109.122 0.006 0.011 0.00000:00:00
198.235.24.232 0.004 0.012 0.00000:00:00
5-226-140-79.infrawat.ch 0.007 0.007 0.00000:00:00
TOTAL: 15 8.548 12.794 0.00000:15:33

Curious NNRP explorers [Top 20]:

SystemConn
66.61.98.95 890
184.186.132.66.censys-scanner.com 3
245.224.132.66.censys-scanner.com 3
232.224.132.66.censys-scanner.com 2
40.124.171.144 2
176.65.149.188.ptr.pfcloud.network 1
195-206-182-196.infrawat.ch 1
198.235.24.232 1
5-226-140-79.infrawat.ch 1
93.123.109.122 1
census12.shodan.io 1
o012.scanner.modat.io 1
r3-88-58.monitoring.internet-measurement.com 1
zl-amsc-nl-gp1-wk118c.internet-census.org 1
TOTAL: 14 909

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
93.123.109.122 2
184.186.132.66.censys-scanner.com 1
245.224.132.66.censys-scanner.com 1
40.124.171.144 1
TOTAL: 4 5

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 2
#001 1
#026#003#001 1
MGLNDD_172.234.115.63_119 1
TOTAL: 4 5

NNRP client timeouts [Top 20]:

SystemConnPeer
184.186.132.66.censys-scanner.com 1 2
232.224.132.66.censys-scanner.com 1 2
245.224.132.66.censys-scanner.com 1 2
5-226-140-79.infrawat.ch 1 1
93.123.109.122 1 1
TOTAL: 5 5 10

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1rec 9 36.0%
2rocksolid 9 36.0%
3alt 3 12.0%
4free 2 8.0%
5fr 1 4.0%
6uk 1 4.0%
TOTAL: 6 25100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1rocksolid.shared.test 9
2rec.arts.tv 5
3rec.arts.comics.dc.universe 3
4alt.fan.rush-limbaugh 2
5free.usenet 2
6alt.usenet.legends.lester-mosley 1
7fr.soc.politique 1
8rec.photo.digital 1
9uk.legal 1
TOTAL: 9 25
innreport from INN 2.7.3 based on initial work (©) 1996-2001 by Fabien Tassin <fta@sofaraway.org> and enhanced by several contributors since then