Daily Usenet report

Oct 13 03:00:04 -- Oct 14 03:00:04

Unknown entries from news log file:

First 50 / 615 lines (8.1%)

Oct 13 03:01:16 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Oct 13 03:13:02 twilightnode nnrpd[1310665]: Reading access from /usr/local/news/etc/readers.conf
Oct 13 03:13:02 twilightnode nnrpd[1310665]: Auth strategy 'localhost' does not match client. Removing.
Oct 13 03:13:02 twilightnode nnrpd[1310665]: 66.61.98.95 res <anonymous>
Oct 13 03:13:02 twilightnode nnrpd[1310665]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 13 03:13:02 twilightnode nnrpd[1310665]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 13 03:13:02 twilightnode nnrpd[1310665]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 13 03:13:02 twilightnode nnrpd[1310665]: 66.61.98.95 no_post anonymous-read
Oct 13 03:13:02 twilightnode nnrpd[1310666]: Reading access from /usr/local/news/etc/readers.conf
Oct 13 03:13:02 twilightnode nnrpd[1310666]: Auth strategy 'localhost' does not match client. Removing.
Oct 13 03:13:02 twilightnode nnrpd[1310666]: 66.61.98.95 res <anonymous>
Oct 13 03:13:02 twilightnode nnrpd[1310666]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 13 03:13:02 twilightnode nnrpd[1310666]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 13 03:13:02 twilightnode nnrpd[1310666]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 13 03:13:02 twilightnode nnrpd[1310666]: 66.61.98.95 no_post anonymous-read
Oct 13 03:19:23 twilightnode nnrpd[1310826]: Reading access from /usr/local/news/etc/readers.conf
Oct 13 03:19:23 twilightnode nnrpd[1310826]: Auth strategy 'localhost' does not match client. Removing.
Oct 13 03:19:23 twilightnode nnrpd[1310826]: o005.scanner.modat.io res <anonymous>
Oct 13 03:19:23 twilightnode nnrpd[1310826]: o005.scanner.modat.io no_match_user <anonymous> <localhost>
Oct 13 03:19:23 twilightnode nnrpd[1310826]: o005.scanner.modat.io no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 13 03:19:23 twilightnode nnrpd[1310826]: o005.scanner.modat.io match_user <anonymous> <anonymous>
Oct 13 03:19:23 twilightnode nnrpd[1310826]: o005.scanner.modat.io no_post anonymous-read
Oct 13 03:29:19 twilightnode nnrpd[1311241]: Reading access from /usr/local/news/etc/readers.conf
Oct 13 03:29:19 twilightnode nnrpd[1311241]: Auth strategy 'localhost' does not match client. Removing.
Oct 13 03:29:19 twilightnode nnrpd[1311241]: 66.61.98.95 res <anonymous>
Oct 13 03:29:19 twilightnode nnrpd[1311241]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 13 03:29:19 twilightnode nnrpd[1311241]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 13 03:29:19 twilightnode nnrpd[1311241]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 13 03:29:19 twilightnode nnrpd[1311241]: 66.61.98.95 no_post anonymous-read
Oct 13 03:29:19 twilightnode nnrpd[1311242]: Reading access from /usr/local/news/etc/readers.conf
Oct 13 03:29:19 twilightnode nnrpd[1311242]: Auth strategy 'localhost' does not match client. Removing.
Oct 13 03:29:19 twilightnode nnrpd[1311242]: 66.61.98.95 res <anonymous>
Oct 13 03:29:19 twilightnode nnrpd[1311242]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 13 03:29:19 twilightnode nnrpd[1311242]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 13 03:29:19 twilightnode nnrpd[1311242]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 13 03:29:19 twilightnode nnrpd[1311242]: 66.61.98.95 no_post anonymous-read
Oct 13 04:26:06 twilightnode nnrpd[1313923]: Reading access from /usr/local/news/etc/readers.conf
Oct 13 04:26:06 twilightnode nnrpd[1313923]: Auth strategy 'localhost' does not match client. Removing.
Oct 13 04:26:06 twilightnode nnrpd[1313923]: 66.61.98.95 res <anonymous>
Oct 13 04:26:06 twilightnode nnrpd[1313923]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 13 04:26:06 twilightnode nnrpd[1313923]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 13 04:26:06 twilightnode nnrpd[1313923]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 13 04:26:06 twilightnode nnrpd[1313923]: 66.61.98.95 no_post anonymous-read
Oct 13 04:26:06 twilightnode nnrpd[1313924]: Reading access from /usr/local/news/etc/readers.conf
Oct 13 04:26:06 twilightnode nnrpd[1313924]: Auth strategy 'localhost' does not match client. Removing.
Oct 13 04:26:06 twilightnode nnrpd[1313924]: 66.61.98.95 res <anonymous>
Oct 13 04:26:06 twilightnode nnrpd[1313924]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 13 04:26:06 twilightnode nnrpd[1313924]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 13 04:26:06 twilightnode nnrpd[1313924]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 13 04:26:06 twilightnode nnrpd[1313924]: 66.61.98.95 no_post anonymous-read

Log entries by program:

Program nameLines%LinesSize%Size
inn 7010 55.0%1.2 MB 62.1%
innd 2781 21.8%419.6 KB 20.9%
nnrpd 1694 13.3%156.7 KB 7.8%
innfeed 1261 9.9%186.8 KB 9.3%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 12747 100.0%2.0 MB100.0%

History cache:

ReasonCount%Count
Positive hits 19393 53.1%
Negative hits 10131 27.7%
Do not exist 6977 19.1%
Cache misses 10 0.0%
TOTAL: 4 36511 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.130 0.0%30 1.000 4.333 11.000
article cleanup00:00:00.090 0.0%6987 0.000 0.013 0.176
article logging00:00:00.315 0.0%6994 0.000 0.045 0.214
article parse00:00:00.143 0.0%9722 0.000 0.015 0.167
article write00:00:07.181 0.0%5873 0.750 1.223 2.389
artlog/artparse00:00:00.000 0.0%1 0.000 0.000 0.000
artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.336 0.0%38625 0.000 0.009 0.042
hisgrep/artcncl00:00:00.036 0.0%30 0.000 1.200 4.000
hissync/artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:04.659 0.0%36556 0.066 0.127 0.960
history sync00:00:00.069 0.0%402 0.000 0.172 2.000
history write00:00:03.316 0.0%6988 0.226 0.475 1.292
idle23:50:14.114 99.9%38827 1036.345 2210.166 9090.515
nntp read00:00:00.952 0.0%38062 0.000 0.025 0.069
overview write00:00:05.250 0.0%5873 0.432 0.894 3.143
perl filter00:00:16.564 0.0%6987 1.088 2.371 23.118
python filter00:00:01.274 0.0%6987 0.050 0.182 1.765
site send00:00:00.254 0.0%11699 0.000 0.022 0.175
TOTAL: 2023:50:54.683100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.039 0.0%6221 0.000 0.006 0.167
article prepare00:00:00.003 0.0%23968 0.000 0.000 0.004
article read00:00:01.202 0.0%3998 0.056 0.301 1.571
backlog stats00:00:00.083 0.0%77722 0.000 0.001 0.013
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.580 0.0%43681 0.000 0.013 0.043
data write00:00:00.923 0.0%38019 0.000 0.024 0.102
idle23:58:34.093100.0%77722 438.970 1110.549 4468.067
status file00:00:00.184 0.0%164 0.000 1.122 5.000
TOTAL: 923:58:37.107100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:08:24.170100.0%2065 101.000 244.150 9837.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.114 0.0%6753 0.000 0.017 0.500
readart00:00:00.015 0.0%27 0.000 0.556 0.600
TOTAL: 400:08:24.299100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 3 6800 4045 2701 54 59%35:15:20
2usenet.blueworldhosting.com 289 6916 1330 4567 1019 19%23:44:22
3newsfeed.endofthelinebbs.com 2 4608 180 4384 44 3%21:14:17
4news.sklaffkom.se 44 95 85 9 1 89%10:55:44
5news.tebibyte.org 2 3468 33 3434 1 0%23:59:41
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 365 21887 5673 15095 1119 25%115:09:24
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net13.0 MB0.0 KB124.5 KB13.1 MB 99%3.3 KB
2usenet.blueworldhosting.com7.4 MB0.0 KB1.3 MB8.7 MB 85%3.8 KB
3newsfeed.endofthelinebbs.com2.5 MB0.0 KB62.9 KB2.6 MB 97%11.8 KB
4news.sklaffkom.se245.8 KB0.0 KB0.9 KB246.7 KB 99%2.9 KB
5news.tebibyte.org166.4 KB0.0 KB3.7 KB170.1 KB 97%5.0 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 623.3 MB0.0 KB1.5 MB24.8 MB 94%3.7 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Oct 13 03:00:04 - 03:59:59 101 1.7% 0.03723.8 KB 2.9% 0.20
Oct 13 04:00:00 - 04:59:59 121 2.1% 0.03767.0 KB 3.1% 0.21
Oct 13 05:00:00 - 05:59:59 88 1.5% 0.02503.0 KB 2.0% 0.14
Oct 13 06:00:00 - 06:59:59 97 1.6% 0.03348.7 KB 1.4% 0.10
Oct 13 07:00:00 - 07:59:59 101 1.7% 0.03337.6 KB 1.4% 0.09
Oct 13 08:00:00 - 08:59:59 202 3.4% 0.06765.6 KB 3.1% 0.21
Oct 13 09:00:00 - 09:59:59 267 4.5% 0.07927.0 KB 3.7% 0.26
Oct 13 10:00:00 - 10:59:59 297 5.0% 0.081.2 MB 4.8% 0.33
Oct 13 11:00:00 - 11:59:59 329 5.6% 0.091.3 MB 5.2% 0.36
Oct 13 12:00:00 - 12:59:59 287 4.9% 0.08991.3 KB 4.0% 0.28
Oct 13 13:00:00 - 13:59:59 236 4.0% 0.07787.5 KB 3.2% 0.22
Oct 13 14:00:00 - 14:59:59 303 5.2% 0.08903.8 KB 3.6% 0.25
Oct 13 15:00:00 - 15:59:59 353 6.0% 0.101.2 MB 4.9% 0.34
Oct 13 16:00:00 - 16:59:59 318 5.4% 0.091.2 MB 4.9% 0.34
Oct 13 17:00:00 - 17:59:59 334 5.7% 0.091.1 MB 4.6% 0.32
Oct 13 18:00:00 - 18:59:59 311 5.3% 0.091.1 MB 4.6% 0.31
Oct 13 19:00:00 - 19:59:59 372 6.3% 0.101.4 MB 5.7% 0.39
Oct 13 20:00:00 - 20:59:59 368 6.3% 0.101.9 MB 8.0% 0.55
Oct 13 21:00:00 - 21:59:59 335 5.7% 0.091.4 MB 5.7% 0.40
Oct 13 22:00:00 - 22:59:59 252 4.3% 0.071.1 MB 4.6% 0.32
Oct 13 23:00:00 - 23:59:59 271 4.6% 0.081.2 MB 5.1% 0.35
Oct 14 00:00:00 - 00:59:59 241 4.1% 0.071.6 MB 6.5% 0.45
Oct 14 01:00:00 - 01:59:59 181 3.1% 0.051.3 MB 5.2% 0.36
Oct 14 02:00:00 - 02:59:59 107 1.8% 0.03399.7 KB 1.6% 0.11
Oct 14 03:00:00 - 03:00:04 10 0.2% 2.5024.9 KB 0.1% 6.22
TOTAL: 24:00:00 5882 100.0% 0.0724.2 MB 100.0% 0.29
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1020 350 0 0 1 0 0 0 669
2twilightnode-out.news.weretis.net 57 25 0 0 0 0 0 0 32
3newsfeed.endofthelinebbs.com 47 2 0 0 0 0 0 0 45
4news.tebibyte.org 3 0 0 0 0 0 0 0 3
5news.sklaffkom.se 1 0 0 0 0 0 0 0 1
TOTAL: 5 1128 377 0 0 1 0 0 0 750

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 49
pl.listserv.chomor-l 7
hispagatos.mastodon.tag.hacking 6
alt.sports.football.pro.dallas-cowboys 2
alt.sports.football.pro.kc-chiefs 2
alt.sports.football.pro.tennessee 2
alt.test.1 2
lada.auto 2
alt.2600.madrid 1
alt.agnosticism 1
alt.autos.alfa-romeo 1
alt.bbs.files-announce 1
alt.fan.don-imus 1
alt.music 1
alt.religion.kibology 1
alt.sports.football.pro.buffalo-bills 1
alt.sports.football.pro.houston-oilers 1
alt.sports.football.pro.la-raiders 1
alt.sports.football.pro.wash-redskins 1
TOTAL: 26 377

Supposedly-moderated groups with unmoderated postings [Top 20]:

GroupsCount
uk.religion.christian 1
TOTAL: 1 1

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 601
Too many newsgroups 109
User-issued cancel 28
Too many newsgroups (meow) 4
TOTAL: 4 742

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 6
usenet.blueworldhosting.com 1
TOTAL: 2 7
No colon-space in header field
usenet.blueworldhosting.com 1
TOTAL: 1 1
TOTAL: 2 8

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 7967 2007 3744 86 0 62 25%23:59:56
2sklaffkom.se 5947 988 1999 2852 0 2 16%23:59:56
3newsfeed.endofthelinebbs.com 10422 47 5574 15 0 295 0%23:59:46
4usenet.blueworldhosting.com 7233 4 4237 1 0 34 0%23:59:55
5weretis.net 1825 4 1756 0 0 0 0%23:34:43
TOTAL: 5 33394 3050 17310 2954 0 393 9%119:34:16
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org5.0 MB478.1 KB5.5 MB0.1 KB/s2.7 KB23:59:56
2sklaffkom.se1.6 MB14.6 MB16.2 MB0.2 KB/s4.3 KB23:59:56
3newsfeed.endofthelinebbs.com181.6 KB39.9 KB221.5 KB0.0 KB/s3.6 KB23:59:46
4usenet.blueworldhosting.com14.8 KB397.0 KB411.8 KB0.0 KB/s82.4 KB23:59:55
5weretis.net7.6 KB0.0 KB7.6 KB0.0 KB/s1.9 KB23:34:43
TOTAL: 56.8 MB15.5 MB22.3 MB0.1 KB/s3.8 KB119:34:16
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
166.61.98.95 80 27123.7 KB 10 0 000:08:09
TOTAL: 1 80 27123.7 KB 10 0 000:08:09

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 83 27123.7 KB 10 0 000:08:20
2*.infrawat.ch 2 00.0 KB 0 0 000:00:00
3*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:02
4*.scanner.modat.io 1 00.0 KB 0 0 000:00:00
TOTAL: 4 87 27123.7 KB 10 0 000:08:24

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
66.61.98.95 0.637 1.502 0.00000:08:09
20.118.36.240 0.007 0.013 0.00000:00:09
199.186.132.66.censys-scanner.com 0.030 0.015 0.00000:00:02
o005.scanner.modat.io 0.009 0.007 0.00000:00:00
147.185.132.76 0.006 0.024 0.00000:00:00
188-240-59-40.infrawat.ch 0.005 0.012 0.00000:00:00
198.235.24.167 0.006 0.005 0.00000:00:00
89-21-67-176.infrawat.ch 0.006 0.007 0.00000:00:00
TOTAL: 8 0.706 1.585 0.00000:08:24

Curious NNRP explorers [Top 20]:

SystemConn
147.185.132.76 1
188-240-59-40.infrawat.ch 1
198.235.24.167 1
199.186.132.66.censys-scanner.com 1
20.118.36.240 1
89-21-67-176.infrawat.ch 1
o005.scanner.modat.io 1
TOTAL: 7 7

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
199.186.132.66.censys-scanner.com 1
TOTAL: 1 1

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 1
TOTAL: 1 1

NNRP client timeouts [Top 20]:

SystemConnPeer
188-240-59-40.infrawat.ch 1 1
TOTAL: 1 1 4

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1free 10 37.0%
2junk 5 18.5%
3linux 4 14.8%
4it 3 11.1%
5alt 2 7.4%
6fr 2 7.4%
7uk 1 3.7%
TOTAL: 7 27100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1free.usenet 10
2junk 5
3it.discussioni.auto 3
4fr.bio.medecine 2
5linux.kernel.netdev 2
6alt.atheism 1
7alt.test 1
8linux.debian.kernel 1
9linux.debian.maint.emacsen 1
10uk.railway 1
TOTAL: 10 27