Daily Usenet report

Oct 11 03:00:05 -- Oct 12 03:00:05

Unknown entries from news log file:

First 50 / 228 lines (21.9%)

Oct 11 03:01:23 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Oct 11 03:32:05 twilightnode nnrpd[1170180]: Reading access from /usr/local/news/etc/readers.conf
Oct 11 03:32:05 twilightnode nnrpd[1170180]: Auth strategy 'localhost' does not match client. Removing.
Oct 11 03:32:05 twilightnode nnrpd[1170180]: 104.172.132.66.censys-scanner.com res <anonymous>
Oct 11 03:32:05 twilightnode nnrpd[1170180]: 104.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Oct 11 03:32:05 twilightnode nnrpd[1170180]: 104.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 11 03:32:05 twilightnode nnrpd[1170180]: 104.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Oct 11 03:32:05 twilightnode nnrpd[1170180]: 104.172.132.66.censys-scanner.com no_post anonymous-read
Oct 11 03:32:05 twilightnode nnrpd[1170180]: 104.172.132.66.censys-scanner.com res <anonymous>
Oct 11 03:32:05 twilightnode nnrpd[1170180]: 104.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Oct 11 03:32:05 twilightnode nnrpd[1170180]: 104.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 11 03:32:05 twilightnode nnrpd[1170180]: 104.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Oct 11 03:32:05 twilightnode nnrpd[1170180]: 104.172.132.66.censys-scanner.com no_post anonymous-read
Oct 11 05:56:49 twilightnode nnrpd[1176556]: Reading access from /usr/local/news/etc/readers.conf
Oct 11 05:56:49 twilightnode nnrpd[1176556]: Auth strategy 'localhost' does not match client. Removing.
Oct 11 05:56:49 twilightnode nnrpd[1176556]: azpdes782jot.stretchoid.com res <anonymous>
Oct 11 05:56:49 twilightnode nnrpd[1176556]: azpdes782jot.stretchoid.com no_match_user <anonymous> <localhost>
Oct 11 05:56:49 twilightnode nnrpd[1176556]: azpdes782jot.stretchoid.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 11 05:56:49 twilightnode nnrpd[1176556]: azpdes782jot.stretchoid.com match_user <anonymous> <anonymous>
Oct 11 05:56:49 twilightnode nnrpd[1176556]: azpdes782jot.stretchoid.com no_post anonymous-read
Oct 11 05:56:58 twilightnode nnrpd[1176560]: Reading access from /usr/local/news/etc/readers.conf
Oct 11 05:56:58 twilightnode nnrpd[1176560]: Auth strategy 'localhost' does not match client. Removing.
Oct 11 05:56:58 twilightnode nnrpd[1176560]: azpdes782jot.stretchoid.com res <anonymous>
Oct 11 05:56:58 twilightnode nnrpd[1176560]: azpdes782jot.stretchoid.com no_match_user <anonymous> <localhost>
Oct 11 05:56:58 twilightnode nnrpd[1176560]: azpdes782jot.stretchoid.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 11 05:56:58 twilightnode nnrpd[1176560]: azpdes782jot.stretchoid.com match_user <anonymous> <anonymous>
Oct 11 05:56:58 twilightnode nnrpd[1176560]: azpdes782jot.stretchoid.com no_post anonymous-read
Oct 11 06:10:42 twilightnode nnrpd[1177420]: Reading access from /usr/local/news/etc/readers.conf
Oct 11 06:10:42 twilightnode nnrpd[1177420]: Auth strategy 'localhost' does not match client. Removing.
Oct 11 06:10:42 twilightnode nnrpd[1177420]: 198.172.132.66.censys-scanner.com res <anonymous>
Oct 11 06:10:42 twilightnode nnrpd[1177420]: 198.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Oct 11 06:10:42 twilightnode nnrpd[1177420]: 198.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 11 06:10:42 twilightnode nnrpd[1177420]: 198.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Oct 11 06:10:42 twilightnode nnrpd[1177420]: 198.172.132.66.censys-scanner.com no_post anonymous-read
Oct 11 06:10:47 twilightnode nnrpd[1177421]: Reading access from /usr/local/news/etc/readers.conf
Oct 11 06:10:47 twilightnode nnrpd[1177421]: Auth strategy 'localhost' does not match client. Removing.
Oct 11 06:10:47 twilightnode nnrpd[1177421]: 198.172.132.66.censys-scanner.com res <anonymous>
Oct 11 06:10:47 twilightnode nnrpd[1177421]: 198.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Oct 11 06:10:47 twilightnode nnrpd[1177421]: 198.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 11 06:10:47 twilightnode nnrpd[1177421]: 198.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Oct 11 06:10:47 twilightnode nnrpd[1177421]: 198.172.132.66.censys-scanner.com no_post anonymous-read
Oct 11 06:10:49 twilightnode nnrpd[1177422]: Reading access from /usr/local/news/etc/readers.conf
Oct 11 06:10:49 twilightnode nnrpd[1177422]: Auth strategy 'localhost' does not match client. Removing.
Oct 11 06:10:49 twilightnode nnrpd[1177422]: 198.172.132.66.censys-scanner.com res <anonymous>
Oct 11 06:10:49 twilightnode nnrpd[1177422]: 198.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Oct 11 06:10:49 twilightnode nnrpd[1177422]: 198.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 11 06:10:49 twilightnode nnrpd[1177422]: 198.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Oct 11 06:10:49 twilightnode nnrpd[1177422]: 198.172.132.66.censys-scanner.com no_post anonymous-read
Oct 11 06:10:51 twilightnode nnrpd[1177423]: Reading access from /usr/local/news/etc/readers.conf
Oct 11 06:10:51 twilightnode nnrpd[1177423]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 6878 58.9%1.2 MB 64.2%
innd 2674 22.9%389.8 KB 20.6%
innfeed 1262 10.8%197.0 KB 10.4%
nnrpd 872 7.5%88.4 KB 4.7%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 11687 100.0%1.8 MB100.0%

History cache:

ReasonCount%Count
Positive hits 19033 53.1%
Negative hits 9961 27.8%
Do not exist 6835 19.1%
Cache misses 27 0.1%
TOTAL: 4 35856 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.051 0.0%18 1.100 2.833 16.000
article cleanup00:00:00.101 0.0%6853 0.000 0.015 0.083
article logging00:00:00.341 0.0%6879 0.000 0.050 0.429
article parse00:00:00.136 0.0%8704 0.000 0.016 0.133
article write00:00:07.052 0.0%5556 0.661 1.269 3.071
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.241 0.0%36771 0.000 0.007 0.123
hisgrep/artcncl00:00:00.013 0.0%18 0.400 0.722 3.000
hissync/artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.890 0.0%35954 0.066 0.136 0.287
history sync00:00:00.088 0.0%415 0.000 0.212 2.000
history write00:00:03.564 0.0%6853 0.148 0.520 1.194
idle24:00:20.689 99.9%37246 999.390 2320.268 12501.646
nntp read00:00:00.902 0.0%36649 0.000 0.025 0.148
overview write00:00:05.443 0.0%5556 0.321 0.980 6.029
perl filter00:00:16.553 0.0%6853 1.250 2.415 14.071
python filter00:00:01.209 0.0%6853 0.025 0.176 1.714
site send00:00:00.295 0.0%11064 0.000 0.027 0.222
TOTAL: 2024:01:01.568100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.026 0.0%5705 0.000 0.005 0.056
article prepare00:00:00.003 0.0%22508 0.000 0.000 0.009
article read00:00:01.248 0.0%3596 0.135 0.347 2.857
backlog stats00:00:00.074 0.0%74680 0.000 0.001 0.013
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.587 0.0%41429 0.000 0.014 0.046
data write00:00:00.954 0.0%35975 0.000 0.027 0.112
idle23:50:41.356100.0%74680 323.984 1149.456 4971.273
status file00:00:00.265 0.0%165 0.000 1.606 9.000
TOTAL: 923:50:44.513100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:03:03.083100.0%695 4.000 263.429 20085.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.034 0.0%1811 0.000 0.019 0.500
readart00:00:00.049 0.0%75 0.286 0.653 1.000
TOTAL: 400:03:03.166100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 146
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 167

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 5 10898 4133 6586 179 37%48:48:09
2usenet.blueworldhosting.com 206 6772 1280 4403 1089 18%23:44:34
3news.tebibyte.org 2 3613 161 3452 0 4%23:59:46
4news.sklaffkom.se 46 110 91 15 4 82%12:26:20
5newsfeed.endofthelinebbs.com 1 2168 54 2089 25 2%13:24:51
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 285 23561 5719 16545 1297 24%122:23:40
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net12.9 MB0.0 KB510.9 KB13.4 MB 96%3.2 KB
2usenet.blueworldhosting.com5.6 MB0.0 KB1.9 MB7.6 MB 74%3.3 KB
3newsfeed.endofthelinebbs.com762.4 KB0.0 KB46.8 KB809.2 KB 94%10.2 KB
4news.tebibyte.org456.6 KB0.0 KB0.0 KB456.6 KB100%2.8 KB
5news.sklaffkom.se325.1 KB0.0 KB6.8 KB331.9 KB 97%3.5 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 620.1 MB0.0 KB2.5 MB22.6 MB 89%3.3 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Oct 11 03:00:05 - 03:59:59 92 1.7% 0.03334.1 KB 1.7% 0.09
Oct 11 04:00:00 - 04:59:59 110 2.0% 0.03502.3 KB 2.5% 0.14
Oct 11 05:00:00 - 05:59:59 122 2.2% 0.03573.7 KB 2.9% 0.16
Oct 11 06:00:00 - 06:59:59 140 2.5% 0.04447.0 KB 2.2% 0.12
Oct 11 07:00:00 - 07:59:59 160 2.9% 0.04582.9 KB 2.9% 0.16
Oct 11 08:00:00 - 08:59:59 174 3.1% 0.05673.2 KB 3.4% 0.19
Oct 11 09:00:00 - 09:59:59 253 4.6% 0.07790.5 KB 3.9% 0.22
Oct 11 10:00:00 - 10:59:59 288 5.2% 0.08810.0 KB 4.0% 0.23
Oct 11 11:00:00 - 11:59:59 293 5.3% 0.081.1 MB 5.4% 0.30
Oct 11 12:00:00 - 12:59:59 298 5.4% 0.081020.8 KB 5.1% 0.28
Oct 11 13:00:00 - 13:59:59 286 5.1% 0.081.0 MB 5.1% 0.29
Oct 11 14:00:00 - 14:59:59 233 4.2% 0.061.3 MB 6.7% 0.38
Oct 11 15:00:00 - 15:59:59 276 5.0% 0.081.0 MB 5.1% 0.29
Oct 11 16:00:00 - 16:59:59 331 6.0% 0.091.1 MB 5.4% 0.30
Oct 11 17:00:00 - 17:59:59 297 5.3% 0.08858.2 KB 4.3% 0.24
Oct 11 18:00:00 - 18:59:59 283 5.1% 0.08869.3 KB 4.3% 0.24
Oct 11 19:00:00 - 19:59:59 283 5.1% 0.08891.7 KB 4.4% 0.25
Oct 11 20:00:00 - 20:59:59 278 5.0% 0.08929.9 KB 4.6% 0.26
Oct 11 21:00:00 - 21:59:59 315 5.7% 0.091.2 MB 6.3% 0.35
Oct 11 22:00:00 - 22:59:59 274 4.9% 0.08804.2 KB 4.0% 0.22
Oct 11 23:00:00 - 23:59:59 236 4.2% 0.071015.6 KB 5.1% 0.28
Oct 12 00:00:00 - 00:59:59 249 4.5% 0.07935.2 KB 4.7% 0.26
Oct 12 01:00:00 - 01:59:59 144 2.6% 0.04578.5 KB 2.9% 0.16
Oct 12 02:00:00 - 02:59:59 130 2.3% 0.04605.3 KB 3.0% 0.17
Oct 12 03:00:00 - 03:00:05 10 0.2% 2.0013.5 KB 0.1% 2.71
TOTAL: 24:00:00 5555 100.0% 0.0619.6 MB 100.0% 0.23
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1090 320 0 0 0 0 0 0 770
2twilightnode-out.news.weretis.net 202 19 0 0 0 0 0 0 183
3newsfeed.endofthelinebbs.com 25 1 0 0 0 0 0 0 24
4news.sklaffkom.se 4 0 0 0 0 0 0 0 4
5news.tebibyte.org 2 2 0 0 0 0 0 0 0
TOTAL: 5 1323 342 0 0 0 0 0 0 981

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 15
hispagatos.mastodon.tag.hacking 8
alt.cypher 5
alt.test.9 5
hamster.de.tools 5
pl.listserv.chomor-l 3
alt.test.test.a 2
alt.bbs.files-announce 1
alt.fan.john-denver 1
alt.science.geology.jobs 1
alt.sports.football.pro.kc-chiefs 1
alt.sports.football.pro.phila-eagles 1
alt.sports.football.pro.tennessee 1
brasil.ciencia.fisica 1
chmurka.statystyki 1
fr.soc.divers 1
ka.comp.misc 1
newsreader.test 1
TOTAL: 19 342

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 664
EMP (phn path) 123
Too many newsgroups 110
User-issued cancel 43
HTML Multipart 6
hierarchy violation - crosspost outside netscape 6
Too many newsgroups (meow) 3
TOTAL: 7 955

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 26
TOTAL: 1 26
TOTAL: 1 26

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 7507 1985 3452 66 0 28 26%23:59:55
2sklaffkom.se 5595 976 2004 2524 0 4 17%23:59:06
3newsfeed.endofthelinebbs.com 10056 54 5336 38 0 219 0%23:59:54
4weretis.net 1603 5 1520 0 0 0 0%23:54:01
5usenet.blueworldhosting.com 6961 1 4026 0 0 3 0%23:59:55
TOTAL: 5 31722 3021 16338 2628 0 254 9%119:52:51
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org5.0 MB777.5 KB5.8 MB0.1 KB/s2.9 KB23:59:55
2sklaffkom.se1.6 MB10.5 MB12.1 MB0.1 KB/s3.5 KB23:59:06
3newsfeed.endofthelinebbs.com214.9 KB126.9 KB341.7 KB0.0 KB/s3.7 KB23:59:54
4weretis.net51.8 KB0.0 KB51.8 KB0.0 KB/s10.4 KB23:54:01
5usenet.blueworldhosting.com2.0 KB0.0 KB2.0 KB0.0 KB/s2.0 KB23:59:55
TOTAL: 56.9 MB11.4 MB18.3 MB0.0 KB/s3.3 KB119:52:51
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
12603:6010:6802:4ca5:1a03:73ff:fe28:be0f 4 492.8 MB 5 0 000:00:48
266.61.98.95 6 2644.5 KB 7 0 000:01:09
TOTAL: 2 10 752.8 MB 12 0 000:01:58

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 15 752.8 MB 12 0 000:02:31
2*.66.censys-scanner.com 6 00.0 KB 0 0 000:00:07
3*.ip.linodeusercontent.com 3 00.0 KB 0 0 000:00:00
4*.monitoring.internet-measurement.com 2 00.0 KB 0 0 000:00:03
5*.stretchoid.com 2 00.0 KB 0 0 000:00:09
6*.infrawat.ch 1 00.0 KB 0 0 000:00:00
7*.scanner.modat.io 1 00.0 KB 0 0 000:00:00
8*.socradar-curiosity-wide-scan-project.socradar.com 1 00.0 KB 0 0 000:00:10
TOTAL: 8 31 752.8 MB 12 0 000:03:03

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
66.61.98.95 0.063 0.166 0.00000:01:09
2603:6010:6802:4ca5:1a03:73ff:fe28:be0f 0.039 0.160 0.00000:00:48
77.67.26.144 0.008 0.015 0.00000:00:20
172.105.56.8.socradar-curiosity-wide-scan-project.socradar.com 0.002 0.019 0.00000:00:10
azpdes782jot.stretchoid.com 0.010 0.014 0.00000:00:09
40.119.46.78 0.004 0.014 0.00000:00:09
198.172.132.66.censys-scanner.com 0.053 0.036 0.00000:00:06
r3-201-c9.monitoring.internet-measurement.com 0.005 0.015 0.00000:00:01
r5-230-e6.monitoring.internet-measurement.com 0.003 0.016 0.00000:00:01
106.75.21.80 0.007 0.012 0.00000:00:01
104.172.132.66.censys-scanner.com 0.025 0.020 0.00000:00:00
205.210.31.75 0.006 0.012 0.00000:00:00
147.185.132.246 0.006 0.015 0.00000:00:00
172-104-156-179.ip.linodeusercontent.com 0.013 0.024 0.00000:00:00
5-226-140-109.infrawat.ch 0.007 0.011 0.00000:00:00
o020.scanner.modat.io 0.006 0.014 0.00000:00:00
TOTAL: 16 0.257 0.563 0.00000:03:03

Curious NNRP explorers [Top 20]:

SystemConn
198.172.132.66.censys-scanner.com 5
172-104-156-179.ip.linodeusercontent.com 3
azpdes782jot.stretchoid.com 2
104.172.132.66.censys-scanner.com 1
106.75.21.80 1
147.185.132.246 1
172.105.56.8.socradar-curiosity-wide-scan-project.socradar.com 1
205.210.31.75 1
40.119.46.78 1
5-226-140-109.infrawat.ch 1
77.67.26.144 1
o020.scanner.modat.io 1
r3-201-c9.monitoring.internet-measurement.com 1
r5-230-e6.monitoring.internet-measurement.com 1
TOTAL: 14 21

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
172-104-156-179.ip.linodeusercontent.com 2
198.172.132.66.censys-scanner.com 2
104.172.132.66.censys-scanner.com 1
TOTAL: 3 5

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 2
#023#003#023#001#023#002#001 1
#026#003#001 1
#026#003#001#005?#001 1
TOTAL: 4 5

NNRP client timeouts [Top 20]:

SystemConnPeer
198.172.132.66.censys-scanner.com 1 3
5-226-140-109.infrawat.ch 1 1
TOTAL: 2 2 6

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1microsoft 44 58.7%
2alt 15 20.0%
3muc 4 5.3%
4sci 4 5.3%
5de 2 2.7%
6hfx 2 2.7%
7it 2 2.7%
8talk 2 2.7%
TOTAL: 8 75100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1microsoft.public.windowsxp.help_and_support 44
2alt.test 13
3sci.physics.relativity 4
4muc.lists.freebsd.bugs 3
5de.sci.electronics 2
6hfx.general 2
7talk.origins 2
8alt.checkmate 1
9alt.sports.football.pro.sea-seahawks 1
10it.cultura.filosofia 1
11it.sport.formula1 1
12muc.lists.freebsd.ports 1
TOTAL: 12 75