Daily Usenet report

Oct 14 03:00:04 -- Oct 15 03:00:04

Unknown entries from news log file:

First 50 / 413 lines (12.1%)

Oct 14 03:01:14 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Oct 14 03:16:30 twilightnode nnrpd[1382635]: Reading access from /usr/local/news/etc/readers.conf
Oct 14 03:16:30 twilightnode nnrpd[1382635]: Auth strategy 'localhost' does not match client. Removing.
Oct 14 03:16:30 twilightnode nnrpd[1382635]: 66.61.98.95 res <anonymous>
Oct 14 03:16:30 twilightnode nnrpd[1382635]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 14 03:16:30 twilightnode nnrpd[1382635]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 14 03:16:30 twilightnode nnrpd[1382635]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 14 03:16:30 twilightnode nnrpd[1382635]: 66.61.98.95 no_post anonymous-read
Oct 14 03:16:30 twilightnode nnrpd[1382636]: Reading access from /usr/local/news/etc/readers.conf
Oct 14 03:16:30 twilightnode nnrpd[1382636]: Auth strategy 'localhost' does not match client. Removing.
Oct 14 03:16:30 twilightnode nnrpd[1382636]: 66.61.98.95 res <anonymous>
Oct 14 03:16:30 twilightnode nnrpd[1382636]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 14 03:16:30 twilightnode nnrpd[1382636]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 14 03:16:30 twilightnode nnrpd[1382636]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 14 03:16:30 twilightnode nnrpd[1382636]: 66.61.98.95 no_post anonymous-read
Oct 14 03:32:33 twilightnode nnrpd[1383357]: Reading access from /usr/local/news/etc/readers.conf
Oct 14 03:32:33 twilightnode nnrpd[1383357]: Auth strategy 'localhost' does not match client. Removing.
Oct 14 03:32:33 twilightnode nnrpd[1383357]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f res <anonymous>
Oct 14 03:32:33 twilightnode nnrpd[1383357]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f no_match_user <anonymous> <localhost>
Oct 14 03:32:33 twilightnode nnrpd[1383357]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 14 03:32:33 twilightnode nnrpd[1383357]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f match_user <anonymous> <anonymous>
Oct 14 03:32:33 twilightnode nnrpd[1383357]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f no_post anonymous-read
Oct 14 03:32:34 twilightnode nnrpd[1383358]: Reading access from /usr/local/news/etc/readers.conf
Oct 14 03:32:34 twilightnode nnrpd[1383358]: Auth strategy 'localhost' does not match client. Removing.
Oct 14 03:32:34 twilightnode nnrpd[1383358]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f res <anonymous>
Oct 14 03:32:34 twilightnode nnrpd[1383358]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f no_match_user <anonymous> <localhost>
Oct 14 03:32:34 twilightnode nnrpd[1383358]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 14 03:32:34 twilightnode nnrpd[1383358]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f match_user <anonymous> <anonymous>
Oct 14 03:32:34 twilightnode nnrpd[1383358]: 2603:6010:6802:4ca5:1a03:73ff:fe28:be0f no_post anonymous-read
Oct 14 03:49:59 twilightnode nnrpd[1383976]: Reading access from /usr/local/news/etc/readers.conf
Oct 14 03:49:59 twilightnode nnrpd[1383976]: Auth strategy 'localhost' does not match client. Removing.
Oct 14 03:49:59 twilightnode nnrpd[1383976]: cloud.census.shodan.io res <anonymous>
Oct 14 03:49:59 twilightnode nnrpd[1383976]: cloud.census.shodan.io no_match_user <anonymous> <localhost>
Oct 14 03:49:59 twilightnode nnrpd[1383976]: cloud.census.shodan.io no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 14 03:49:59 twilightnode nnrpd[1383976]: cloud.census.shodan.io match_user <anonymous> <anonymous>
Oct 14 03:49:59 twilightnode nnrpd[1383976]: cloud.census.shodan.io no_post anonymous-read
Oct 14 04:01:58 twilightnode nnrpd[1384530]: Reading access from /usr/local/news/etc/readers.conf
Oct 14 04:01:58 twilightnode nnrpd[1384530]: Auth strategy 'localhost' does not match client. Removing.
Oct 14 04:01:58 twilightnode nnrpd[1384530]: 66.61.98.95 res <anonymous>
Oct 14 04:01:58 twilightnode nnrpd[1384530]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 14 04:01:58 twilightnode nnrpd[1384530]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 14 04:01:58 twilightnode nnrpd[1384530]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 14 04:01:58 twilightnode nnrpd[1384530]: 66.61.98.95 no_post anonymous-read
Oct 14 04:01:58 twilightnode nnrpd[1384531]: Reading access from /usr/local/news/etc/readers.conf
Oct 14 04:01:58 twilightnode nnrpd[1384531]: Auth strategy 'localhost' does not match client. Removing.
Oct 14 04:01:58 twilightnode nnrpd[1384531]: 66.61.98.95 res <anonymous>
Oct 14 04:01:58 twilightnode nnrpd[1384531]: 66.61.98.95 no_match_user <anonymous> <localhost>
Oct 14 04:01:58 twilightnode nnrpd[1384531]: 66.61.98.95 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 14 04:01:58 twilightnode nnrpd[1384531]: 66.61.98.95 match_user <anonymous> <anonymous>
Oct 14 04:01:58 twilightnode nnrpd[1384531]: 66.61.98.95 no_post anonymous-read

Log entries by program:

Program nameLines%LinesSize%Size
inn 7344 46.0%1.3 MB 55.9%
nnrpd 4380 27.4%411.8 KB 17.6%
innd 2881 18.0%402.5 KB 17.2%
innfeed 1345 8.4%214.5 KB 9.2%
controlchan 14 0.1%3.2 KB 0.1%
TOTAL: 5 15964 100.0%2.3 MB100.0%

History cache:

ReasonCount%Count
Positive hits 19170 52.0%
Negative hits 10455 28.3%
Do not exist 7245 19.6%
Cache misses 28 0.1%
TOTAL: 4 36898 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.086 0.0%28 0.000 3.071 11.000
article cleanup00:00:00.128 0.0%7298 0.000 0.018 0.107
article logging00:00:00.356 0.0%7316 0.000 0.049 0.174
article parse00:00:00.209 0.0%9868 0.000 0.021 0.113
article write00:00:09.961 0.0%6115 0.667 1.629 7.875
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.246 0.0%37975 0.000 0.006 0.065
hisgrep/artcncl00:00:00.026 0.0%28 0.000 0.929 1.200
hissync/artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:07.049 0.0%37016 0.074 0.190 2.044
history sync00:00:00.175 0.0%411 0.000 0.426 26.333
history write00:00:04.076 0.0%7271 0.200 0.561 1.160
idle23:49:56.232 99.9%38362 791.380 2236.490 8460.761
nntp read00:00:01.033 0.0%37640 0.000 0.027 0.093
overview write00:00:06.568 0.0%6115 0.220 1.074 5.471
perl filter00:00:18.645 0.0%7269 0.778 2.565 13.710
python filter00:00:01.518 0.0%7269 0.000 0.209 1.368
site send00:00:00.452 0.0%12191 0.000 0.037 0.112
TOTAL: 2023:50:46.760100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.056 0.0%6581 0.000 0.009 0.143
article prepare00:00:00.003 0.0%26428 0.000 0.000 0.004
article read00:00:01.635 0.0%4356 0.091 0.375 1.600
backlog stats00:00:00.066 0.0%79193 0.000 0.001 0.008
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.728 0.0%44556 0.000 0.016 0.046
data write00:00:01.212 0.0%38817 0.000 0.031 0.099
idle23:39:54.151100.0%79193 296.333 1075.779 4292.771
status file00:00:00.217 0.0%165 0.000 1.315 6.000
TOTAL: 923:39:58.068100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:15:25.067 99.9%4868 99.000 190.030 20064.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.903 0.1%12179 0.000 0.074 6.895
readart00:00:00.201 0.0%393 0.000 0.511 1.167
TOTAL: 400:15:26.171100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 150
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 171

Control channel:

SendernewgrouprmgroupOtherBad PGPDoItOK
control@eternal-september.org001001
TOTAL001001

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 6 14060 4135 9862 63 29%57:33:48
2usenet.blueworldhosting.com 288 7046 1445 4521 1080 20%23:25:19
3news.tebibyte.org 2 3736 150 3583 3 4%24:00:02
4news.sklaffkom.se 45 82 73 9 0 89%10:12:41
5newsfeed.endofthelinebbs.com 2 992 34 954 4 3%08:05:06
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 368 25916 5837 18929 1150 22%123:16:56
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net12.8 MB47.6 KB125.6 KB13.0 MB 98%3.2 KB
2usenet.blueworldhosting.com6.9 MB0.0 KB1.6 MB8.5 MB 81%3.4 KB
3newsfeed.endofthelinebbs.com528.9 KB0.0 KB13.5 KB542.4 KB 97%14.3 KB
4news.tebibyte.org506.6 KB0.0 KB3.2 KB509.8 KB 99%3.3 KB
5news.sklaffkom.se212.4 KB0.0 KB0.0 KB212.4 KB100%2.9 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 620.9 MB47.6 KB1.7 MB22.7 MB 92%3.3 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Oct 14 03:00:04 - 03:59:59 86 1.4% 0.02268.9 KB 1.1% 0.07
Oct 14 04:00:00 - 04:59:59 87 1.4% 0.02702.5 KB 3.0% 0.20
Oct 14 05:00:00 - 05:59:59 125 2.0% 0.03634.9 KB 2.7% 0.18
Oct 14 06:00:00 - 06:59:59 145 2.4% 0.04603.7 KB 2.6% 0.17
Oct 14 07:00:00 - 07:59:59 185 3.0% 0.05567.5 KB 2.4% 0.16
Oct 14 08:00:00 - 08:59:59 280 4.6% 0.081.0 MB 4.5% 0.30
Oct 14 09:00:00 - 09:59:59 280 4.6% 0.081.2 MB 5.1% 0.33
Oct 14 10:00:00 - 10:59:59 360 5.9% 0.101.1 MB 5.0% 0.32
Oct 14 11:00:00 - 11:59:59 363 5.9% 0.101.1 MB 4.8% 0.31
Oct 14 12:00:00 - 12:59:59 294 4.8% 0.081.1 MB 4.7% 0.31
Oct 14 13:00:00 - 13:59:59 304 5.0% 0.081022.2 KB 4.4% 0.28
Oct 14 14:00:00 - 14:59:59 249 4.1% 0.071.2 MB 5.1% 0.33
Oct 14 15:00:00 - 15:59:59 292 4.8% 0.081.2 MB 5.3% 0.34
Oct 14 16:00:00 - 16:59:59 311 5.1% 0.091021.7 KB 4.4% 0.28
Oct 14 17:00:00 - 17:59:59 323 5.3% 0.091.1 MB 4.9% 0.32
Oct 14 18:00:00 - 18:59:59 334 5.4% 0.091.1 MB 4.7% 0.31
Oct 14 19:00:00 - 19:59:59 535 8.7% 0.151.4 MB 6.3% 0.41
Oct 14 20:00:00 - 20:59:59 275 4.5% 0.081.4 MB 6.0% 0.39
Oct 14 21:00:00 - 21:59:59 315 5.1% 0.091.1 MB 5.0% 0.32
Oct 14 22:00:00 - 22:59:59 235 3.8% 0.07792.2 KB 3.4% 0.22
Oct 14 23:00:00 - 23:59:59 225 3.7% 0.061.2 MB 5.2% 0.34
Oct 15 00:00:00 - 00:59:59 253 4.1% 0.071.3 MB 5.5% 0.36
Oct 15 01:00:00 - 01:59:59 149 2.4% 0.04441.1 KB 1.9% 0.12
Oct 15 02:00:00 - 02:59:59 125 2.0% 0.03492.7 KB 2.1% 0.14
Oct 15 03:00:00 - 03:00:04 10 0.2% 2.5015.6 KB 0.1% 3.91
TOTAL: 24:00:00 6140 100.0% 0.0722.9 MB 100.0% 0.27
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1084 326 0 0 0 0 0 0 758
2twilightnode-out.news.weretis.net 78 19 0 27 0 0 0 0 32
3newsfeed.endofthelinebbs.com 37 3 0 0 0 0 0 0 34
4news.tebibyte.org 5 0 0 0 0 0 0 0 5
TOTAL: 4 1204 348 0 27 0 0 0 0 829

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 20
hispagatos.mastodon.tag.hacking 10
lada.auto 6
alt.sports.basketball.nba.la-lakers 3
pl.listserv.chomor-l 3
alt.music 2
fido.ru.home 2
alt.autos.performance-cars 1
alt.autos.rolls-royce-bentley 1
alt.bbs.files-announce 1
alt.hollywood 1
alt.horology 1
alt.journalism.newspapers 1
alt.test.1 1
chmurka.statystyki 1
de.sci.chemie 1
fido.english_tutor 1
hispagatos.test 1
kraft.talks 1
TOTAL: 22 348

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 628
Too many newsgroups 167
User-issued cancel 12
Too many newsgroups (meow) 2
TOTAL: 4 809

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 18
TOTAL: 1 18
TOTAL: 1 18

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 8043 2259 3739 103 0 91 28%23:52:43
2sklaffkom.se 6207 1041 1884 3175 0 1 16%23:52:44
3newsfeed.endofthelinebbs.com 10437 26 5818 37 0 330 0%23:52:43
4weretis.net 1870 8 1821 0 0 0 0%23:43:36
5usenet.blueworldhosting.com 7244 0 4343 0 0 94 0%23:52:43
TOTAL: 5 33801 3334 17605 3315 0 516 9%119:14:29
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org5.6 MB819.0 KB6.4 MB0.1 KB/s2.8 KB23:52:43
2sklaffkom.se1.8 MB14.7 MB16.5 MB0.2 KB/s4.0 KB23:52:44
3newsfeed.endofthelinebbs.com75.9 KB86.7 KB162.6 KB0.0 KB/s2.6 KB23:52:43
4weretis.net9.7 KB0.0 KB9.7 KB0.0 KB/s1.2 KB23:43:36
5usenet.blueworldhosting.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:52:43
TOTAL: 57.5 MB15.6 MB23.1 MB0.1 KB/s3.6 KB119:14:29
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
12603:6010:6802:4ca5:1a03:73ff:fe28:be0f 12 3335.3 MB 35 0 000:05:51
266.61.98.95 14 34120.0 KB 10 0 000:02:31
3174.96.78.81 16 26140.6 KB 11 0 000:05:59
TOTAL: 3 42 3935.5 MB 56 0 000:14:22

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 48 3935.5 MB 56 0 000:14:55
2*.census.shodan.io 2 00.0 KB 0 0 000:00:02
3*.infrawat.ch 2 00.0 KB 0 0 000:00:00
4*.monitoring.internet-measurement.com 2 00.0 KB 0 0 000:00:03
5*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:03
6*.internet-census.org 1 00.0 KB 0 0 000:00:11
7*.scanner.modat.io 1 00.0 KB 0 0 000:00:00
8*.stretchoid.com 1 00.0 KB 0 0 000:00:09
TOTAL: 8 58 3935.5 MB 56 0 000:15:26

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
174.96.78.81 0.366 1.330 0.00000:05:59
2603:6010:6802:4ca5:1a03:73ff:fe28:be0f 0.334 1.120 0.00000:05:51
66.61.98.95 0.215 0.757 0.00000:02:31
77.67.26.239 0.008 0.024 0.00000:00:20
152.32.200.117 0.017 0.036 0.00000:00:11
zl-amsc-nl-gp1-wk118a.internet-census.org 0.009 0.020 0.00000:00:11
azpdsgi0f4bx.stretchoid.com 0.006 0.023 0.00000:00:09
44.172.132.66.censys-scanner.com 0.036 0.023 0.00000:00:03
r3-102-66.monitoring.internet-measurement.com 0.005 0.015 0.00000:00:01
r4-61-3d.monitoring.internet-measurement.com 0.007 0.023 0.00000:00:01
cloud.census.shodan.io 0.005 0.015 0.00000:00:01
draft.census.shodan.io 0.005 0.007 0.00000:00:01
71.6.134.237 0.005 0.014 0.00000:00:00
o019.scanner.modat.io 0.003 0.015 0.00000:00:00
5-252-83-110.infrawat.ch 0.007 0.034 0.00000:00:00
205.210.31.30 0.005 0.022 0.00000:00:00
213-166-84-54.infrawat.ch 0.005 0.012 0.00000:00:00
TOTAL: 17 1.038 3.490 0.00000:15:26

Curious NNRP explorers [Top 20]:

SystemConn
152.32.200.117 3
205.210.31.30 1
213-166-84-54.infrawat.ch 1
44.172.132.66.censys-scanner.com 1
5-252-83-110.infrawat.ch 1
71.6.134.237 1
77.67.26.239 1
azpdsgi0f4bx.stretchoid.com 1
cloud.census.shodan.io 1
draft.census.shodan.io 1
o019.scanner.modat.io 1
r3-102-66.monitoring.internet-measurement.com 1
r4-61-3d.monitoring.internet-measurement.com 1
zl-amsc-nl-gp1-wk118a.internet-census.org 1
TOTAL: 14 16

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
152.32.200.117 2
44.172.132.66.censys-scanner.com 1
TOTAL: 2 3

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
#026#003#001 1
?#024 1
EHLO www.censys.io 1
TOTAL: 3 3

NNRP client timeouts [Top 20]:

SystemConnPeer
213-166-84-54.infrawat.ch 1 1
5-252-83-110.infrawat.ch 1 1
TOTAL: 2 2 3

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1linux 154 39.2%
2free 82 20.9%
3microsoft 44 11.2%
4alt 36 9.2%
5aus 16 4.1%
6fr 13 3.3%
7hispagatos 12 3.1%
8rocksolid 9 2.3%
9rec 4 1.0%
10talk 4 1.0%
11it 3 0.8%
12lada 3 0.8%
13pl 3 0.8%
14comp 2 0.5%
15francom 2 0.5%
16junk 2 0.5%
17sci 2 0.5%
1824hoursupport 1 0.3%
19sac 1 0.3%
TOTAL: 19 393100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1free.usenet 82
2linux.debian.bugs.rc 63
3linux.kernel.git 59
4microsoft.public.windowsxp.general 44
5linux.kernel.netdev 29
6aus.cars 14
7hispagatos.hacking.news 12
8alt.test 9
9rocksolid.shared.test 9
10alt.usage.english 8
11fr.rec.photo 8
12alt.fan.rush-limbaugh 6
13alt.anonymous.messages 5
14fr.bio.medecine 4
15talk.politics.misc 4
16alt.arts.poetry.comments 3
17lada.talk 3
18aus.politics 2
19francom.esoterisme 2
20it.hobby.fai-da-te 2
21junk 2
22linux.debian.bugs.dist 2
23pl.soc.polityka 2
24rec.bicycles.tech 2
2524hoursupport.helpdesk 1
26alt.buddha.short.fat.guy 1
27alt.comp.os.windows-11 1
28alt.computer.workshop 1
29alt.law-enforcement 1
30alt.politics.democrats.d 1
31comp.lang.c 1
32comp.sys.mac.advocacy 1
33fr.soc.politique 1
34it.politica 1
35linux.debian.user.portuguese 1
36pl.rec.rowery 1
37rec.arts.sf.written 1
38rec.arts.tv 1
39sac.politics 1
40sci.physics 1
41sci.skeptic 1
TOTAL: 41 393