Daily Usenet report

Oct 25 03:00:04 -- Oct 26 03:00:05

Unknown entries from news log file:

First 50 / 102 lines (49.0%)

Oct 25 03:01:14 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Oct 25 03:33:51 twilightnode nnrpd[348540]: Reading access from /usr/local/news/etc/readers.conf
Oct 25 03:33:51 twilightnode nnrpd[348540]: Auth strategy 'localhost' does not match client. Removing.
Oct 25 03:33:51 twilightnode nnrpd[348540]: refrigerator.census.shodan.io res <anonymous>
Oct 25 03:33:51 twilightnode nnrpd[348540]: refrigerator.census.shodan.io no_match_user <anonymous> <localhost>
Oct 25 03:33:51 twilightnode nnrpd[348540]: refrigerator.census.shodan.io no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 25 03:33:51 twilightnode nnrpd[348540]: refrigerator.census.shodan.io match_user <anonymous> <anonymous>
Oct 25 03:33:51 twilightnode nnrpd[348540]: refrigerator.census.shodan.io no_post anonymous-read
Oct 25 09:07:53 twilightnode nnrpd[364052]: Reading access from /usr/local/news/etc/readers.conf
Oct 25 09:07:53 twilightnode nnrpd[364052]: Auth strategy 'localhost' does not match client. Removing.
Oct 25 09:07:53 twilightnode nnrpd[364052]: 223.172.132.66.censys-scanner.com res <anonymous>
Oct 25 09:07:53 twilightnode nnrpd[364052]: 223.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Oct 25 09:07:53 twilightnode nnrpd[364052]: 223.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 25 09:07:53 twilightnode nnrpd[364052]: 223.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Oct 25 09:07:53 twilightnode nnrpd[364052]: 223.172.132.66.censys-scanner.com no_post anonymous-read
Oct 25 09:08:11 twilightnode nnrpd[364064]: Reading access from /usr/local/news/etc/readers.conf
Oct 25 09:08:11 twilightnode nnrpd[364064]: Auth strategy 'localhost' does not match client. Removing.
Oct 25 09:08:11 twilightnode nnrpd[364064]: 223.172.132.66.censys-scanner.com res <anonymous>
Oct 25 09:08:11 twilightnode nnrpd[364064]: 223.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Oct 25 09:08:11 twilightnode nnrpd[364064]: 223.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 25 09:08:11 twilightnode nnrpd[364064]: 223.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Oct 25 09:08:11 twilightnode nnrpd[364064]: 223.172.132.66.censys-scanner.com no_post anonymous-read
Oct 25 09:08:24 twilightnode nnrpd[364065]: Reading access from /usr/local/news/etc/readers.conf
Oct 25 09:08:24 twilightnode nnrpd[364065]: Auth strategy 'localhost' does not match client. Removing.
Oct 25 09:08:24 twilightnode nnrpd[364065]: 223.172.132.66.censys-scanner.com res <anonymous>
Oct 25 09:08:24 twilightnode nnrpd[364065]: 223.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Oct 25 09:08:24 twilightnode nnrpd[364065]: 223.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 25 09:08:24 twilightnode nnrpd[364065]: 223.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Oct 25 09:08:24 twilightnode nnrpd[364065]: 223.172.132.66.censys-scanner.com no_post anonymous-read
Oct 25 09:08:25 twilightnode nnrpd[364065]: 223.172.132.66.censys-scanner.com res <anonymous>
Oct 25 09:08:25 twilightnode nnrpd[364065]: 223.172.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Oct 25 09:08:25 twilightnode nnrpd[364065]: 223.172.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 25 09:08:25 twilightnode nnrpd[364065]: 223.172.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Oct 25 09:08:25 twilightnode nnrpd[364065]: 223.172.132.66.censys-scanner.com no_post anonymous-read
Oct 25 13:08:02 twilightnode nnrpd[374892]: Reading access from /usr/local/news/etc/readers.conf
Oct 25 13:08:02 twilightnode nnrpd[374892]: Auth strategy 'localhost' does not match client. Removing.
Oct 25 13:08:02 twilightnode nnrpd[374892]: azpdwswc8dbe.stretchoid.com res <anonymous>
Oct 25 13:08:02 twilightnode nnrpd[374892]: azpdwswc8dbe.stretchoid.com no_match_user <anonymous> <localhost>
Oct 25 13:08:02 twilightnode nnrpd[374892]: azpdwswc8dbe.stretchoid.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 25 13:08:02 twilightnode nnrpd[374892]: azpdwswc8dbe.stretchoid.com match_user <anonymous> <anonymous>
Oct 25 13:08:02 twilightnode nnrpd[374892]: azpdwswc8dbe.stretchoid.com no_post anonymous-read
Oct 25 19:12:47 twilightnode nnrpd[392105]: Reading access from /usr/local/news/etc/readers.conf
Oct 25 19:12:47 twilightnode nnrpd[392105]: Auth strategy 'localhost' does not match client. Removing.
Oct 25 19:12:47 twilightnode nnrpd[392105]: 69-5-169-116.infrawat.ch res <anonymous>
Oct 25 19:12:47 twilightnode nnrpd[392105]: 69-5-169-116.infrawat.ch no_match_user <anonymous> <localhost>
Oct 25 19:12:47 twilightnode nnrpd[392105]: 69-5-169-116.infrawat.ch no_match_user <anonymous> *,!<anonymous>,!<localhost>
Oct 25 19:12:47 twilightnode nnrpd[392105]: 69-5-169-116.infrawat.ch match_user <anonymous> <anonymous>
Oct 25 19:12:47 twilightnode nnrpd[392105]: 69-5-169-116.infrawat.ch no_post anonymous-read
Oct 25 19:13:24 twilightnode nnrpd[392120]: Reading access from /usr/local/news/etc/readers.conf
Oct 25 19:13:24 twilightnode nnrpd[392120]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 8755 46.3%1.5 MB 53.9%
innd 7681 40.6%1.0 MB 36.5%
innfeed 1306 6.9%174.8 KB 6.0%
nnrpd 1159 6.1%101.9 KB 3.5%
TOTAL: 4 18901 100.0%2.8 MB100.0%

History cache:

ReasonCount%Count
Positive hits 16593 44.9%
Negative hits 11679 31.6%
Do not exist 8686 23.5%
Cache misses 2 0.0%
TOTAL: 4 36960 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.025 0.0%13 0.667 1.923 9.000
article cleanup00:00:00.067 0.0%8726 0.000 0.008 0.091
article logging00:00:00.360 0.0%8757 0.000 0.041 0.182
article parse00:00:00.132 0.0%10971 0.000 0.012 0.154
article write00:00:08.468 0.0%7146 0.654 1.185 4.222
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.253 0.0%39033 0.000 0.006 0.126
hisgrep/artcncl00:00:00.010 0.0%13 0.000 0.769 4.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:05.976 0.0%37002 0.071 0.162 0.559
history sync00:00:00.041 0.0%326 0.000 0.126 1.000
history write00:00:04.612 0.0%8702 0.118 0.530 1.500
idle23:59:44.452 99.9%41700 813.140 2071.570 9091.470
nntp read00:00:01.087 0.0%40042 0.000 0.027 0.121
overview write00:00:06.122 0.0%7146 0.290 0.857 5.556
perl filter00:00:12.537 0.0%8702 0.740 1.441 7.200
python filter00:00:00.842 0.0%8702 0.000 0.097 0.862
site send00:00:00.474 0.0%14242 0.000 0.033 0.136
TOTAL: 1824:00:25.458100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.027 0.0%7300 0.000 0.004 0.067
article prepare00:00:00.004 0.0%37088 0.000 0.000 0.006
article read00:00:01.359 0.0%5155 0.054 0.264 1.375
backlog stats00:00:00.050 0.0%72489 0.000 0.001 0.008
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.624 0.0%41319 0.000 0.015 0.052
data write00:00:01.250 0.0%34656 0.000 0.036 0.089
idle23:59:46.225100.0%72489 365.928 1191.715 5723.036
status file00:00:00.303 0.0%186 0.000 1.629 12.000
TOTAL: 923:59:49.842100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:03:30.976100.0%1156 125.000 182.505 9821.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.046 0.0%2726 0.000 0.017 0.500
readart00:00:00.016 0.0%40 0.400 0.400 0.400
TOTAL: 400:03:31.038100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 6 15521 5643 9609 269 36%53:08:52
2usenet.blueworldhosting.com 1402 8320 1486 5497 1337 17%23:57:37
3news.sklaffkom.se 36 86 84 2 0 97%08:52:22
4news.tebibyte.org 2 3595 64 3531 0 1%24:58:50
5localhost 25 0 0 0 0 0%00:00:01
TOTAL: 5 1471 27522 7277 18639 1606 26%110:57:42
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net15.6 MB50.5 KB1.3 MB16.9 MB 91%2.9 KB
2usenet.blueworldhosting.com5.7 MB9.6 KB2.5 MB8.2 MB 69%3.0 KB
3news.sklaffkom.se254.5 KB0.0 KB0.0 KB254.5 KB100%3.0 KB
4news.tebibyte.org227.4 KB0.0 KB0.0 KB227.4 KB100%3.6 KB
5localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 521.7 MB60.1 KB3.8 MB25.6 MB 84%3.0 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Oct 25 03:00:04 - 03:59:59 139 1.9% 0.04561.2 KB 2.6% 0.16
Oct 25 04:00:00 - 04:59:59 85 1.2% 0.02293.2 KB 1.3% 0.08
Oct 25 05:00:00 - 05:59:59 112 1.6% 0.03478.3 KB 2.2% 0.13
Oct 25 06:00:00 - 06:59:59 108 1.5% 0.03406.0 KB 1.8% 0.11
Oct 25 07:00:00 - 07:59:59 130 1.8% 0.04413.0 KB 1.9% 0.11
Oct 25 08:00:00 - 08:59:59 170 2.4% 0.05518.4 KB 2.4% 0.14
Oct 25 09:00:00 - 09:59:59 360 5.0% 0.10881.8 KB 4.0% 0.24
Oct 25 10:00:00 - 10:59:59 351 4.9% 0.10880.0 KB 4.0% 0.24
Oct 25 11:00:00 - 11:59:59 328 4.6% 0.09835.0 KB 3.8% 0.23
Oct 25 12:00:00 - 12:59:59 331 4.6% 0.09879.0 KB 4.0% 0.24
Oct 25 13:00:00 - 13:59:59 386 5.4% 0.111020.2 KB 4.6% 0.28
Oct 25 14:00:00 - 14:59:59 520 7.3% 0.141.1 MB 5.4% 0.33
Oct 25 15:00:00 - 15:59:59 349 4.9% 0.10973.1 KB 4.4% 0.27
Oct 25 16:00:00 - 16:59:59 352 4.9% 0.10882.6 KB 4.0% 0.25
Oct 25 17:00:00 - 17:59:59 284 4.0% 0.08750.8 KB 3.4% 0.21
Oct 25 18:00:00 - 18:59:59 433 6.1% 0.121.3 MB 5.9% 0.36
Oct 25 19:00:00 - 19:59:59 595 8.3% 0.172.0 MB 9.4% 0.57
Oct 25 20:00:00 - 20:59:59 413 5.8% 0.111.5 MB 7.1% 0.44
Oct 25 21:00:00 - 21:59:59 425 5.9% 0.121.4 MB 6.3% 0.38
Oct 25 22:00:00 - 22:59:59 366 5.1% 0.101.2 MB 5.7% 0.35
Oct 25 23:00:00 - 23:59:59 338 4.7% 0.09948.0 KB 4.3% 0.26
Oct 26 00:00:00 - 00:59:59 249 3.5% 0.071.1 MB 5.2% 0.32
Oct 26 01:00:00 - 01:59:59 167 2.3% 0.05866.2 KB 3.9% 0.24
Oct 26 02:00:00 - 02:59:59 153 2.1% 0.04485.0 KB 2.2% 0.13
Oct 26 03:00:00 - 03:00:05 1 0.0% 0.203.7 KB 0.0% 0.74
TOTAL: 24:00:01 7145 100.0% 0.0821.4 MB 100.0% 0.25
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1337 327 0 4 0 0 0 0 1006
2twilightnode-out.news.weretis.net 273 27 0 20 0 0 0 0 226
TOTAL: 2 1610 354 0 24 0 0 0 0 1232

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 21
de.comp.misc 13
hispagatos.mastodon.tag.hacking 7
grenzland.club 6
alt.sports.football.pro.kc-chiefs 4
alt.magick 2
alt.bbs.files-announce 1
alt.magick.chaos 1
alt.sports.basketball.nba.la-lakers 1
alt.sports.football.pro.cinci-bengals 1
alt.sports.football.pro.houston-texans 1
alt.sports.football.pro.no-saints 1
chmurka.statystyki 1
fido.ru.home 1
fido.ru.qico 1
free.control 1
it-alt.community.cibba 1
newsgrouper.support 1
pl.listserv.chomor-l 1
TOTAL: 20 354

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 851
EMP (phn path) 172
Too many newsgroups 152
User-issued cancel 20
HTML Multipart 6
TOTAL: 5 1201

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 31
TOTAL: 1 31
TOTAL: 1 31

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 8485 4045 2850 200 0 145 47%23:59:54
2sklaffkom.se 7308 1114 2075 3906 0 0 15%23:59:53
3weretis.net 1693 6 1609 0 0 0 0%23:29:33
4usenet.blueworldhosting.com 8228 1 4892 0 0 61 0%23:59:33
5newsfeed.endofthelinebbs.com 0 0 0 0 0 7095 0%23:57:41
TOTAL: 5 25714 5166 11426 4106 0 7301 20%119:26:34
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org9.4 MB2.5 MB11.9 MB0.1 KB/s2.9 KB23:59:54
2sklaffkom.se1.7 MB13.5 MB15.2 MB0.2 KB/s3.1 KB23:59:53
3weretis.net7.9 KB0.0 KB7.9 KB0.0 KB/s1.3 KB23:29:33
4usenet.blueworldhosting.com4.2 KB0.0 KB4.2 KB0.0 KB/s4.2 KB23:59:33
5newsfeed.endofthelinebbs.com0.0 KB0.0 KB0.0 KB0.0 KB/s023:57:41
TOTAL: 511.1 MB16.0 MB27.1 MB0.1 KB/s3.0 KB119:26:34
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1174.96.78.81 2 40430.8 KB 13 0 000:02:57
TOTAL: 1 2 40430.8 KB 13 0 000:02:57

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 2 40430.8 KB 13 0 000:02:57
2*.66.censys-scanner.com 6 00.0 KB 0 0 000:00:11
3*.infrawat.ch 2 00.0 KB 0 0 000:00:00
4*.census.shodan.io 1 00.0 KB 0 0 000:00:00
5*.internet-census.org 1 00.0 KB 0 0 000:00:10
6*.stretchoid.com 1 00.0 KB 0 0 000:00:09
TOTAL: 6 13 40430.8 KB 13 0 000:03:31

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
174.96.78.81 0.085 0.463 0.00000:02:57
sh-ams-nl-gp1-wk115b.internet-census.org 0.006 0.012 0.00000:00:10
azpdwswc8dbe.stretchoid.com 0.006 0.016 0.00000:00:09
223.172.132.66.censys-scanner.com 0.035 0.027 0.00000:00:07
90.195.132.66.censys-scanner.com 0.042 0.042 0.00000:00:04
refrigerator.census.shodan.io 0.004 0.019 0.00000:00:00
31-14-254-93.infrawat.ch 0.006 0.010 0.00000:00:00
69-5-169-116.infrawat.ch 0.005 0.021 0.00000:00:00
TOTAL: 8 0.189 0.610 0.00000:03:31

Curious NNRP explorers [Top 20]:

SystemConn
223.172.132.66.censys-scanner.com 3
90.195.132.66.censys-scanner.com 3
31-14-254-93.infrawat.ch 1
69-5-169-116.infrawat.ch 1
azpdwswc8dbe.stretchoid.com 1
refrigerator.census.shodan.io 1
sh-ams-nl-gp1-wk115b.internet-census.org 1
TOTAL: 7 11

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
223.172.132.66.censys-scanner.com 1
90.195.132.66.censys-scanner.com 1
TOTAL: 2 2

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 2
TOTAL: 1 2

NNRP client timeouts [Top 20]:

SystemConnPeer
223.172.132.66.censys-scanner.com 1 2
31-14-254-93.infrawat.ch 1 1
90.195.132.66.censys-scanner.com 1 2
TOTAL: 3 3 6

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1linux 21 52.5%
2soc 8 20.0%
3alt 4 10.0%
4it 2 5.0%
5fr 1 2.5%
6free 1 2.5%
7junk 1 2.5%
8news 1 2.5%
9pl 1 2.5%
TOTAL: 9 40100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1linux.kernel.git 15
2soc.culture.bulgaria 8
3linux.debian.bugs.dist 6
4it.sport.calcio.inter-fc 2
5alt.bible.prophecy 1
6alt.christnet.bible 1
7alt.christnet.christianlife 1
8alt.religion.druid 1
9fr.sci.physique 1
10free.usenet 1
11junk 1
12news.lists.filters 1
13pl.soc.prawo 1
TOTAL: 13 40