Daily Usenet report

Oct 15 03:00:04 -- Oct 16 03:00:05

Unknown entries from news log file:

First 50 / 365 lines (13.7%)

Oct 15 03:01:25 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Oct 15 03:17:08 twilightnode nnrpd[53879]: Reading access from /usr/local/news/etc/readers.conf
Oct 15 03:17:08 twilightnode nnrpd[53879]: Auth strategy 'localhost' does not match client. Removing.
Oct 15 03:17:08 twilightnode nnrpd[53879]: 174.96.78.81 res <anonymous>
Oct 15 03:17:08 twilightnode nnrpd[53879]: 174.96.78.81 no_match_user <anonymous> <localhost>
Oct 15 03:17:08 twilightnode nnrpd[53879]: 174.96.78.81 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 15 03:17:08 twilightnode nnrpd[53879]: 174.96.78.81 match_user <anonymous> <anonymous>
Oct 15 03:17:08 twilightnode nnrpd[53879]: 174.96.78.81 no_post anonymous-read
Oct 15 03:17:08 twilightnode nnrpd[53880]: Reading access from /usr/local/news/etc/readers.conf
Oct 15 03:17:08 twilightnode nnrpd[53880]: Auth strategy 'localhost' does not match client. Removing.
Oct 15 03:17:08 twilightnode nnrpd[53880]: 174.96.78.81 res <anonymous>
Oct 15 03:17:08 twilightnode nnrpd[53880]: 174.96.78.81 no_match_user <anonymous> <localhost>
Oct 15 03:17:08 twilightnode nnrpd[53880]: 174.96.78.81 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 15 03:17:08 twilightnode nnrpd[53880]: 174.96.78.81 match_user <anonymous> <anonymous>
Oct 15 03:17:08 twilightnode nnrpd[53880]: 174.96.78.81 no_post anonymous-read
Oct 15 03:29:52 twilightnode nnrpd[54306]: Reading access from /usr/local/news/etc/readers.conf
Oct 15 03:29:52 twilightnode nnrpd[54306]: Auth strategy 'localhost' does not match client. Removing.
Oct 15 03:29:52 twilightnode nnrpd[54306]: 174.96.78.81 res <anonymous>
Oct 15 03:29:52 twilightnode nnrpd[54306]: 174.96.78.81 no_match_user <anonymous> <localhost>
Oct 15 03:29:52 twilightnode nnrpd[54306]: 174.96.78.81 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 15 03:29:52 twilightnode nnrpd[54306]: 174.96.78.81 match_user <anonymous> <anonymous>
Oct 15 03:29:52 twilightnode nnrpd[54306]: 174.96.78.81 no_post anonymous-read
Oct 15 03:29:52 twilightnode nnrpd[54307]: Reading access from /usr/local/news/etc/readers.conf
Oct 15 03:29:52 twilightnode nnrpd[54307]: Auth strategy 'localhost' does not match client. Removing.
Oct 15 03:29:52 twilightnode nnrpd[54307]: 174.96.78.81 res <anonymous>
Oct 15 03:29:52 twilightnode nnrpd[54307]: 174.96.78.81 no_match_user <anonymous> <localhost>
Oct 15 03:29:52 twilightnode nnrpd[54307]: 174.96.78.81 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 15 03:29:52 twilightnode nnrpd[54307]: 174.96.78.81 match_user <anonymous> <anonymous>
Oct 15 03:29:52 twilightnode nnrpd[54307]: 174.96.78.81 no_post anonymous-read
Oct 15 04:15:42 twilightnode nnrpd[56407]: Reading access from /usr/local/news/etc/readers.conf
Oct 15 04:15:42 twilightnode nnrpd[56407]: Auth strategy 'localhost' does not match client. Removing.
Oct 15 04:15:42 twilightnode nnrpd[56407]: 174.96.78.81 res <anonymous>
Oct 15 04:15:42 twilightnode nnrpd[56407]: 174.96.78.81 no_match_user <anonymous> <localhost>
Oct 15 04:15:42 twilightnode nnrpd[56407]: 174.96.78.81 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 15 04:15:42 twilightnode nnrpd[56407]: 174.96.78.81 match_user <anonymous> <anonymous>
Oct 15 04:15:42 twilightnode nnrpd[56407]: 174.96.78.81 no_post anonymous-read
Oct 15 04:15:42 twilightnode nnrpd[56408]: Reading access from /usr/local/news/etc/readers.conf
Oct 15 04:15:42 twilightnode nnrpd[56408]: Auth strategy 'localhost' does not match client. Removing.
Oct 15 04:15:42 twilightnode nnrpd[56408]: 174.96.78.81 res <anonymous>
Oct 15 04:15:42 twilightnode nnrpd[56408]: 174.96.78.81 no_match_user <anonymous> <localhost>
Oct 15 04:15:42 twilightnode nnrpd[56408]: 174.96.78.81 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 15 04:15:42 twilightnode nnrpd[56408]: 174.96.78.81 match_user <anonymous> <anonymous>
Oct 15 04:15:42 twilightnode nnrpd[56408]: 174.96.78.81 no_post anonymous-read
Oct 15 04:18:19 twilightnode nnrpd[56575]: Reading access from /usr/local/news/etc/readers.conf
Oct 15 04:18:19 twilightnode nnrpd[56575]: Auth strategy 'localhost' does not match client. Removing.
Oct 15 04:18:19 twilightnode nnrpd[56575]: 174.96.78.81 res <anonymous>
Oct 15 04:18:19 twilightnode nnrpd[56575]: 174.96.78.81 no_match_user <anonymous> <localhost>
Oct 15 04:18:19 twilightnode nnrpd[56575]: 174.96.78.81 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 15 04:18:19 twilightnode nnrpd[56575]: 174.96.78.81 match_user <anonymous> <anonymous>
Oct 15 04:18:19 twilightnode nnrpd[56575]: 174.96.78.81 no_post anonymous-read

Log entries by program:

Program nameLines%LinesSize%Size
nnrpd 7344 38.9%621.1 KB 24.5%
inn 7302 38.6%1.3 MB 51.0%
innd 2934 15.5%416.0 KB 16.4%
innfeed 1288 6.8%201.7 KB 7.9%
controlchan 27 0.1%6.1 KB 0.2%
pgpverify 2 0.0%0.4 KB 0.0%
TOTAL: 6 18897 100.0%2.5 MB100.0%

History cache:

ReasonCount%Count
Positive hits 19549 51.9%
Negative hits 10832 28.8%
Do not exist 7253 19.3%
Cache misses 4 0.0%
TOTAL: 4 37638 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.077 0.0%32 1.000 2.406 11.000
article cleanup00:00:00.164 0.0%7268 0.000 0.023 0.278
article logging00:00:00.389 0.0%7298 0.000 0.053 0.205
article parse00:00:00.197 0.0%9792 0.000 0.020 0.244
article write00:00:10.124 0.0%6007 1.000 1.685 29.167
artlog/artparse00:00:00.001 0.0%2 0.000 0.500 1.000
data move00:00:00.193 0.0%39518 0.000 0.005 0.368
hisgrep/artcncl00:00:00.036 0.0%32 0.000 1.125 7.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:08.622 0.0%37726 0.113 0.229 5.030
history sync00:00:00.107 0.0%412 0.000 0.260 5.500
history write00:00:04.978 0.0%7270 0.273 0.685 4.312
idle23:59:52.458 99.9%39679 1167.700 2177.284 12245.204
nntp read00:00:01.231 0.0%39002 0.000 0.032 0.123
overview write00:00:06.864 0.0%6007 0.500 1.143 4.222
perl filter00:00:20.019 0.0%7268 1.508 2.754 19.361
python filter00:00:01.618 0.0%7268 0.091 0.223 1.278
site send00:00:00.566 0.0%11973 0.000 0.047 0.222
TOTAL: 1824:00:47.644100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.066 0.0%6293 0.000 0.010 0.111
article prepare00:00:00.001 0.0%25616 0.000 0.000 0.006
article read00:00:01.722 0.0%4092 0.111 0.421 2.500
backlog stats00:00:00.115 0.0%79468 0.000 0.001 0.027
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.884 0.0%44654 0.000 0.020 0.073
data write00:00:01.411 0.0%38732 0.009 0.036 0.154
idle23:59:46.093100.0%79468 366.134 1087.055 8243.945
status file00:00:00.355 0.0%179 0.000 1.983 12.000
TOTAL: 923:59:50.647100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:19:07.054100.0%7447 111.000 154.029 9847.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.517 0.0%16278 0.000 0.032 0.500
readart00:00:00.010 0.0%25 0.000 0.400 1.000
TOTAL: 400:19:07.581100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Control channel:

SendernewgrouprmgroupOtherBad PGPDoItOK
group-admin@isc.org002202
TOTAL002202

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 3 10785 4329 6428 28 40%47:34:29
2usenet.blueworldhosting.com 289 7190 1445 4589 1156 20%23:49:03
3newsfeed.endofthelinebbs.com 1 4114 182 3909 23 4%20:34:47
4news.tebibyte.org 1 3093 146 2943 4 4%20:59:07
5news.sklaffkom.se 44 126 96 8 22 76%10:07:53
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 363 25308 6198 17877 1233 24%123:05:19
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net14.2 MB0.0 KB50.4 KB14.3 MB 99%3.4 KB
2usenet.blueworldhosting.com7.6 MB0.0 KB1.5 MB9.1 MB 83%3.6 KB
3newsfeed.endofthelinebbs.com2.1 MB0.0 KB70.0 KB2.1 MB 96%10.6 KB
4news.tebibyte.org384.6 KB0.0 KB5.2 KB389.8 KB 98%2.6 KB
5news.sklaffkom.se243.3 KB0.0 KB25.9 KB269.1 KB 90%2.3 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 624.5 MB0.0 KB1.7 MB26.2 MB 93%3.6 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Oct 15 03:00:04 - 03:59:59 134 2.2% 0.04769.8 KB 3.1% 0.21
Oct 15 04:00:00 - 04:59:59 95 1.6% 0.03540.0 KB 2.2% 0.15
Oct 15 05:00:00 - 05:59:59 83 1.4% 0.02274.7 KB 1.1% 0.08
Oct 15 06:00:00 - 06:59:59 133 2.2% 0.04506.9 KB 2.1% 0.14
Oct 15 07:00:00 - 07:59:59 113 1.9% 0.03440.5 KB 1.8% 0.12
Oct 15 08:00:00 - 08:59:59 179 3.0% 0.05466.1 KB 1.9% 0.13
Oct 15 09:00:00 - 09:59:59 330 5.5% 0.091.3 MB 5.3% 0.36
Oct 15 10:00:00 - 10:59:59 299 5.0% 0.08953.9 KB 3.9% 0.26
Oct 15 11:00:00 - 11:59:59 329 5.5% 0.091.2 MB 5.2% 0.35
Oct 15 12:00:00 - 12:59:59 325 5.4% 0.091.2 MB 5.2% 0.35
Oct 15 13:00:00 - 13:59:59 336 5.6% 0.091.2 MB 5.0% 0.34
Oct 15 14:00:00 - 14:59:59 353 5.9% 0.101.2 MB 5.2% 0.36
Oct 15 15:00:00 - 15:59:59 324 5.4% 0.091.1 MB 4.7% 0.32
Oct 15 16:00:00 - 16:59:59 295 4.9% 0.081.1 MB 4.5% 0.31
Oct 15 17:00:00 - 17:59:59 349 5.8% 0.102.0 MB 8.2% 0.56
Oct 15 18:00:00 - 18:59:59 318 5.3% 0.091.1 MB 4.7% 0.32
Oct 15 19:00:00 - 19:59:59 345 5.7% 0.101.6 MB 6.6% 0.45
Oct 15 20:00:00 - 20:59:59 347 5.8% 0.101.4 MB 5.7% 0.39
Oct 15 21:00:00 - 21:59:59 335 5.6% 0.091.4 MB 6.0% 0.41
Oct 15 22:00:00 - 22:59:59 288 4.8% 0.081.1 MB 4.6% 0.31
Oct 15 23:00:00 - 23:59:59 229 3.8% 0.061013.5 KB 4.1% 0.28
Oct 16 00:00:00 - 00:59:59 194 3.2% 0.05931.2 KB 3.8% 0.26
Oct 16 01:00:00 - 01:59:59 153 2.5% 0.04581.9 KB 2.4% 0.16
Oct 16 02:00:00 - 02:59:59 114 1.9% 0.03714.8 KB 2.9% 0.20
Oct 16 03:00:00 - 03:00:05 9 0.1% 1.808.1 KB 0.0% 1.61
TOTAL: 24:00:01 6009 100.0% 0.0724.1 MB 100.0% 0.29
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1155 344 0 0 0 0 0 0 811
2twilightnode-out.news.weretis.net 63 17 0 0 0 0 0 0 46
3newsfeed.endofthelinebbs.com 53 5 0 0 0 0 0 0 48
4news.sklaffkom.se 22 0 0 0 0 0 0 0 22
TOTAL: 4 1293 366 0 0 0 0 0 0 927

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 33
hispagatos.mastodon.tag.hacking 8
alt.disney 4
grenzland.club 4
pl.listserv.chomor-l 4
sfnet.harrastus.musiikki 3
alt.journalism.newspapers 2
alt.test.9 2
fido.su.pol 2
alt.2600.madrid 1
alt.autos.lamborghini 1
alt.autos.performance-cars 1
alt.bbs.files-announce 1
alt.politics.bush 1
alt.politics.communism 1
alt.test.1 1
biz.mlm 1
braunschweig.allgemeines 1
chmurka.statystyki 1
TOTAL: 26 366

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 737
Too many newsgroups 117
User-issued cancel 38
Too many newsgroups (meow) 3
TOTAL: 4 895

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 30
TOTAL: 1 30
No colon-space in header field
usenet.blueworldhosting.com 2
TOTAL: 1 2
TOTAL: 2 32

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 7947 2271 3573 125 0 29 28%23:59:55
2sklaffkom.se 6056 997 2024 2946 0 0 16%23:59:02
3newsfeed.endofthelinebbs.com 10537 32 5773 36 0 295 0%23:59:21
4usenet.blueworldhosting.com 7265 5 4254 0 0 4 0%23:59:54
5weretis.net 1731 1 1694 0 0 0 0%23:48:15
TOTAL: 5 33536 3306 17318 3107 0 328 9%119:46:27
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org6.1 MB1.2 MB7.3 MB0.1 KB/s3.1 KB23:59:55
2sklaffkom.se1.9 MB14.3 MB16.3 MB0.2 KB/s4.2 KB23:59:02
3newsfeed.endofthelinebbs.com108.4 KB81.3 KB189.7 KB0.0 KB/s2.8 KB23:59:21
4weretis.net11.2 KB0.0 KB11.2 KB0.0 KB/s11.2 KB23:48:15
5usenet.blueworldhosting.com7.6 KB0.0 KB7.6 KB0.0 KB/s1.5 KB23:59:54
TOTAL: 58.2 MB15.6 MB23.8 MB0.1 KB/s3.8 KB119:46:27
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1174.96.78.81 44 2576.5 KB 13 0 000:18:45
TOTAL: 1 44 2576.5 KB 13 0 000:18:45

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 48 2576.5 KB 13 0 000:19:06
2*.66.censys-scanner.com 1 00.0 KB 0 0 000:00:00
3*.infrawat.ch 1 00.0 KB 0 0 000:00:00
4*.ip.frontiernet.net 1 00.0 KB 0 0 000:00:00
TOTAL: 4 51 2576.5 KB 13 0 000:19:07

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
174.96.78.81 0.972 3.026 0.00000:18:45
135.233.115.176 0.009 0.008 0.00000:00:09
13.86.117.56 0.002 0.024 0.00000:00:09
147.185.133.119 0.007 0.014 0.00000:00:01
107.195.132.66.censys-scanner.com 0.028 0.026 0.00000:00:00
81-19-216-74.infrawat.ch 0.004 0.026 0.00000:00:00
198.235.24.156 0.008 0.010 0.00000:00:00
172-99-61-198.e55debe299579139e7cfe9be84b63964.ip.frontiernet.net 0.003 0.012 0.00000:00:00
TOTAL: 8 1.033 3.146 0.00000:19:07

Curious NNRP explorers [Top 20]:

SystemConn
107.195.132.66.censys-scanner.com 1
13.86.117.56 1
135.233.115.176 1
147.185.133.119 1
172-99-61-198.e55debe299579139e7cfe9be84b63964.ip.frontiernet.net 1
198.235.24.156 1
81-19-216-74.infrawat.ch 1
TOTAL: 7 7

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
147.185.133.119 4
107.195.132.66.censys-scanner.com 1
TOTAL: 2 5

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
Accept-Encoding: gzip 1
EHLO www.censys.io 1
GET / HTTP/1.1 1
Host: 172.234.115.63:119 1
User-Agent: Hello from Palo Alto Network... 1
TOTAL: 5 5

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1alt 13 52.0%
2rec 8 32.0%
3comp 1 4.0%
4it 1 4.0%
5linux 1 4.0%
6uk 1 4.0%
TOTAL: 6 25100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1rec.arts.drwho 7
2alt.bible 4
3alt.checkmate 3
4alt.survival 2
5alt.bbs.mystic 1
6alt.buddha.short.fat.guy 1
7alt.sports.basketball.nba.gs-warriors 1
8alt.sports.football.pro.sd-chargers 1
9comp.sys.mac.advocacy 1
10it.cultura.filosofia 1
11linux.debian.ports.x86-64 1
12rec.sport.soccer 1
13uk.railway 1
TOTAL: 13 25