Daily Usenet report

Nov 5 03:00:04 -- Nov 6 03:00:04

Unknown entries from news log file:

First 50 / 258 lines (19.4%)

Nov 5 03:01:11 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Nov 5 03:08:25 twilightnode nnrpd[1141510]: Reading access from /usr/local/news/etc/readers.conf
Nov 5 03:08:25 twilightnode nnrpd[1141510]: Auth strategy 'localhost' does not match client. Removing.
Nov 5 03:08:25 twilightnode nnrpd[1141510]: pirate.census.shodan.io res <anonymous>
Nov 5 03:08:25 twilightnode nnrpd[1141510]: pirate.census.shodan.io no_match_user <anonymous> <localhost>
Nov 5 03:08:25 twilightnode nnrpd[1141510]: pirate.census.shodan.io no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 5 03:08:25 twilightnode nnrpd[1141510]: pirate.census.shodan.io match_user <anonymous> <anonymous>
Nov 5 03:08:25 twilightnode nnrpd[1141510]: pirate.census.shodan.io no_post anonymous-read
Nov 5 05:13:14 twilightnode nnrpd[1147079]: Reading access from /usr/local/news/etc/readers.conf
Nov 5 05:13:14 twilightnode nnrpd[1147079]: Auth strategy 'localhost' does not match client. Removing.
Nov 5 05:13:14 twilightnode nnrpd[1147079]: malta.scan.bufferover.run res <anonymous>
Nov 5 05:13:14 twilightnode nnrpd[1147079]: malta.scan.bufferover.run no_match_user <anonymous> <localhost>
Nov 5 05:13:14 twilightnode nnrpd[1147079]: malta.scan.bufferover.run no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 5 05:13:14 twilightnode nnrpd[1147079]: malta.scan.bufferover.run match_user <anonymous> <anonymous>
Nov 5 05:13:14 twilightnode nnrpd[1147079]: malta.scan.bufferover.run no_post anonymous-read
Nov 5 05:13:14 twilightnode nnrpd[1147080]: Reading access from /usr/local/news/etc/readers.conf
Nov 5 05:13:14 twilightnode nnrpd[1147080]: Auth strategy 'localhost' does not match client. Removing.
Nov 5 05:13:14 twilightnode nnrpd[1147080]: malta.scan.bufferover.run res <anonymous>
Nov 5 05:13:14 twilightnode nnrpd[1147080]: malta.scan.bufferover.run no_match_user <anonymous> <localhost>
Nov 5 05:13:14 twilightnode nnrpd[1147080]: malta.scan.bufferover.run no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 5 05:13:14 twilightnode nnrpd[1147080]: malta.scan.bufferover.run match_user <anonymous> <anonymous>
Nov 5 05:13:14 twilightnode nnrpd[1147080]: malta.scan.bufferover.run no_post anonymous-read
Nov 5 07:07:10 twilightnode nnrpd[1152848]: Reading access from /usr/local/news/etc/readers.conf
Nov 5 07:07:10 twilightnode nnrpd[1152848]: Auth strategy 'localhost' does not match client. Removing.
Nov 5 07:07:10 twilightnode nnrpd[1152848]: 56.146.94.167.censys-scanner.com res <anonymous>
Nov 5 07:07:10 twilightnode nnrpd[1152848]: 56.146.94.167.censys-scanner.com no_match_user <anonymous> <localhost>
Nov 5 07:07:10 twilightnode nnrpd[1152848]: 56.146.94.167.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 5 07:07:10 twilightnode nnrpd[1152848]: 56.146.94.167.censys-scanner.com match_user <anonymous> <anonymous>
Nov 5 07:07:10 twilightnode nnrpd[1152848]: 56.146.94.167.censys-scanner.com no_post anonymous-read
Nov 5 07:07:13 twilightnode nnrpd[1152849]: Reading access from /usr/local/news/etc/readers.conf
Nov 5 07:07:13 twilightnode nnrpd[1152849]: Auth strategy 'localhost' does not match client. Removing.
Nov 5 07:07:13 twilightnode nnrpd[1152849]: 56.146.94.167.censys-scanner.com res <anonymous>
Nov 5 07:07:13 twilightnode nnrpd[1152849]: 56.146.94.167.censys-scanner.com no_match_user <anonymous> <localhost>
Nov 5 07:07:13 twilightnode nnrpd[1152849]: 56.146.94.167.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 5 07:07:13 twilightnode nnrpd[1152849]: 56.146.94.167.censys-scanner.com match_user <anonymous> <anonymous>
Nov 5 07:07:13 twilightnode nnrpd[1152849]: 56.146.94.167.censys-scanner.com no_post anonymous-read
Nov 5 07:07:17 twilightnode nnrpd[1152850]: Reading access from /usr/local/news/etc/readers.conf
Nov 5 07:07:17 twilightnode nnrpd[1152850]: Auth strategy 'localhost' does not match client. Removing.
Nov 5 07:07:17 twilightnode nnrpd[1152850]: 56.146.94.167.censys-scanner.com res <anonymous>
Nov 5 07:07:17 twilightnode nnrpd[1152850]: 56.146.94.167.censys-scanner.com no_match_user <anonymous> <localhost>
Nov 5 07:07:17 twilightnode nnrpd[1152850]: 56.146.94.167.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 5 07:07:17 twilightnode nnrpd[1152850]: 56.146.94.167.censys-scanner.com match_user <anonymous> <anonymous>
Nov 5 07:07:17 twilightnode nnrpd[1152850]: 56.146.94.167.censys-scanner.com no_post anonymous-read
Nov 5 07:07:17 twilightnode nnrpd[1152850]: 56.146.94.167.censys-scanner.com res <anonymous>
Nov 5 07:07:17 twilightnode nnrpd[1152850]: 56.146.94.167.censys-scanner.com no_match_user <anonymous> <localhost>
Nov 5 07:07:17 twilightnode nnrpd[1152850]: 56.146.94.167.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 5 07:07:17 twilightnode nnrpd[1152850]: 56.146.94.167.censys-scanner.com match_user <anonymous> <anonymous>
Nov 5 07:07:17 twilightnode nnrpd[1152850]: 56.146.94.167.censys-scanner.com no_post anonymous-read
Nov 5 12:03:31 twilightnode nnrpd[1166698]: Reading access from /usr/local/news/etc/readers.conf
Nov 5 12:03:31 twilightnode nnrpd[1166698]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 7767 63.0%1.3 MB 69.4%
innd 2157 17.5%284.8 KB 14.4%
innfeed 1257 10.2%217.6 KB 11.0%
nnrpd 1150 9.3%104.4 KB 5.3%
controlchan 3 0.0%0.4 KB 0.0%
TOTAL: 5 12334 100.0%1.9 MB100.0%

History cache:

ReasonCount%Count
Positive hits 20830 52.3%
Negative hits 11283 28.3%
Do not exist 7706 19.4%
Cache misses 0 0.0%
TOTAL: 4 39819 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.067 0.0%35 0.250 1.914 4.000
article cleanup00:00:00.098 0.0%7725 0.000 0.013 0.120
article logging00:00:00.260 0.0%7762 0.000 0.033 0.196
article parse00:00:00.141 0.0%11502 0.000 0.012 0.068
article write00:00:08.201 0.0%6378 0.735 1.286 3.095
artlog/artparse00:00:00.000 0.0%1 0.000 0.000 0.000
data move00:00:00.359 0.0%43796 0.000 0.008 0.116
hisgrep/artcncl00:00:00.038 0.0%35 0.000 1.086 2.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:05.733 0.0%39892 0.080 0.144 0.490
history sync00:00:00.108 0.0%313 0.000 0.345 8.500
history write00:00:04.099 0.0%7726 0.200 0.531 1.178
idle23:59:44.125 99.9%42625 1011.690 2026.607 7894.447
nntp read00:00:01.149 0.0%42277 0.000 0.027 0.111
overview write00:00:06.786 0.0%6378 0.500 1.064 3.412
perl filter00:00:13.108 0.0%7725 0.817 1.697 8.692
python filter00:00:01.055 0.0%7725 0.030 0.137 1.200
site send00:00:00.507 0.0%12705 0.000 0.040 0.143
TOTAL: 1824:00:25.834100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.030 0.0%6596 0.000 0.005 0.091
article prepare00:00:00.002 0.0%27544 0.000 0.000 0.003
article read00:00:01.497 0.0%4548 0.089 0.329 1.208
backlog stats00:00:00.096 0.0%85232 0.000 0.001 0.009
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.683 0.0%47892 0.000 0.014 0.036
data write00:00:01.231 0.0%41547 0.004 0.030 0.075
idle23:57:52.417100.0%85232 311.498 1012.207 3886.084
status file00:00:00.313 0.0%162 0.000 1.932 9.000
TOTAL: 923:57:56.269100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:03:51.185100.0%1085 44.000 213.074 10041.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.081 0.0%2951 0.000 0.027 0.200
readart00:00:00.010 0.0%19 0.500 0.526 0.667
TOTAL: 400:03:51.276100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Control channel:

SendernewgrouprmgroupOtherBad PGPDoItOK
group-admin@isc.org020002
TOTAL020002

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 4 10042 4776 5206 60 47%44:01:16
2usenet.blueworldhosting.com 65 7707 1083 5421 1203 14%24:02:24
3newsfeed.endofthelinebbs.com 4 3001 248 2691 62 8%14:13:57
4news.sklaffkom.se 45 117 111 6 0 94%12:04:46
5news.tebibyte.org 1 3733 32 3700 1 0%23:59:53
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 144 24600 6250 17024 1326 25%118:22:16
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net16.1 MB0.0 KB165.9 KB16.2 MB 99%3.4 KB
2usenet.blueworldhosting.com7.2 MB0.0 KB2.2 MB9.4 MB 76%4.2 KB
3newsfeed.endofthelinebbs.com3.3 MB0.0 KB99.8 KB3.4 MB 97%11.3 KB
4news.sklaffkom.se348.6 KB0.0 KB0.0 KB348.6 KB100%3.1 KB
5news.tebibyte.org151.9 KB0.0 KB1.7 KB153.7 KB 98%4.7 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 627.1 MB0.0 KB2.5 MB29.6 MB 91%4.0 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Nov 5 03:00:04 - 03:59:59 127 2.0% 0.04793.0 KB 2.7% 0.22
Nov 5 04:00:00 - 04:59:59 110 1.7% 0.03696.6 KB 2.3% 0.19
Nov 5 05:00:00 - 05:59:59 129 2.0% 0.04598.4 KB 2.0% 0.17
Nov 5 06:00:00 - 06:59:59 132 2.1% 0.04615.4 KB 2.1% 0.17
Nov 5 07:00:00 - 07:59:59 118 1.8% 0.03399.4 KB 1.3% 0.11
Nov 5 08:00:00 - 08:59:59 197 3.1% 0.051.0 MB 3.6% 0.30
Nov 5 09:00:00 - 09:59:59 353 5.5% 0.101.3 MB 4.6% 0.38
Nov 5 10:00:00 - 10:59:59 395 6.2% 0.111.2 MB 4.1% 0.34
Nov 5 11:00:00 - 11:59:59 366 5.7% 0.101.4 MB 4.8% 0.40
Nov 5 12:00:00 - 12:59:59 400 6.3% 0.111.8 MB 6.0% 0.50
Nov 5 13:00:00 - 13:59:59 326 5.1% 0.091.6 MB 5.4% 0.45
Nov 5 14:00:00 - 14:59:59 295 4.6% 0.081.3 MB 4.5% 0.37
Nov 5 15:00:00 - 15:59:59 354 5.5% 0.101.7 MB 5.9% 0.49
Nov 5 16:00:00 - 16:59:59 335 5.2% 0.091.7 MB 5.7% 0.47
Nov 5 17:00:00 - 17:59:59 388 6.1% 0.112.5 MB 8.4% 0.70
Nov 5 18:00:00 - 18:59:59 414 6.5% 0.121.8 MB 6.1% 0.51
Nov 5 19:00:00 - 19:59:59 305 4.8% 0.081.3 MB 4.4% 0.36
Nov 5 20:00:00 - 20:59:59 273 4.3% 0.081.0 MB 3.5% 0.29
Nov 5 21:00:00 - 21:59:59 337 5.3% 0.091.8 MB 6.3% 0.52
Nov 5 22:00:00 - 22:59:59 292 4.6% 0.081.4 MB 4.8% 0.40
Nov 5 23:00:00 - 23:59:59 277 4.3% 0.081.4 MB 4.6% 0.38
Nov 6 00:00:00 - 00:59:59 220 3.4% 0.061018.9 KB 3.4% 0.28
Nov 6 01:00:00 - 01:59:59 125 2.0% 0.03616.3 KB 2.1% 0.17
Nov 6 02:00:00 - 02:59:59 110 1.7% 0.03425.9 KB 1.4% 0.12
Nov 6 03:00:00 - 03:00:04 4 0.1% 1.0028.1 KB 0.1% 7.02
TOTAL: 24:00:00 6382 100.0% 0.0729.2 MB 100.0% 0.35
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 1203 366 0 0 0 0 0 0 837
2newsfeed.endofthelinebbs.com 94 8 0 0 0 0 0 0 86
3twilightnode-out.news.weretis.net 85 13 0 0 0 0 0 0 72
4news.tebibyte.org 3 3 0 0 0 0 0 0 0
TOTAL: 4 1385 390 0 0 0 0 0 0 995

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 45
free.misc 20
test 8
local.general 5
hispagatos.mastodon.tag.hacking 3
3dfx.products.voodoobanshee 2
3dfx.users.voodoobanshee 2
alt.2600.madrid 1
alt.bbs.files-announce 1
alt.idiot.will-dockery 1
alt.pl.radio.radiomaryja 1
alt.religion.eckankar 1
alt.sports.basketball.nba.la-lakers 1
alt.sports.football.pro.gb-packers 1
alt.test.test.jojo 1
chmurka.statystyki 1
christnet.bible.religion 1
de.soc.recht.datennetze 1
dk.kultur.musik 1
TOTAL: 25 390

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 760
Too many newsgroups 172
User-issued cancel 12
EMP (phn path) 10
HTML Multipart 3
TOTAL: 5 957

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 37
TOTAL: 1 37
No colon-space in header field
usenet.blueworldhosting.com 1
TOTAL: 1 1
TOTAL: 2 38

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 8388 2271 3934 122 0 19 27%23:59:32
2sklaffkom.se 6462 1069 1924 3336 0 0 16%23:59:56
3newsfeed.endofthelinebbs.com 10940 60 5881 21 0 240 0%23:59:56
4weretis.net 1706 7 1626 0 0 0 0%23:52:23
5usenet.blueworldhosting.com 8262 6 4815 0 0 24 0%23:59:56
TOTAL: 5 35758 3413 18180 3479 0 283 9%119:51:43
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org6.2 MB493.7 KB6.7 MB0.1 KB/s2.9 KB23:59:32
2sklaffkom.se1.7 MB18.5 MB20.2 MB0.2 KB/s4.7 KB23:59:56
3newsfeed.endofthelinebbs.com214.3 KB46.9 KB261.2 KB0.0 KB/s3.2 KB23:59:56
4usenet.blueworldhosting.com15.3 KB0.0 KB15.3 KB0.0 KB/s2.5 KB23:59:56
5weretis.net15.2 KB0.0 KB15.2 KB0.0 KB/s2.2 KB23:52:23
TOTAL: 58.1 MB19.0 MB27.1 MB0.1 KB/s4.0 KB119:51:43
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1174.96.78.81 20 1955.9 KB 6 0 000:03:25
TOTAL: 1 20 1955.9 KB 6 0 000:03:25

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 26 1955.9 KB 6 0 000:03:47
2*.167.censys-scanner.com 3 00.0 KB 0 0 000:00:00
3*.infrawat.ch 2 00.0 KB 0 0 000:00:00
4*.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
5*.census.shodan.io 1 00.0 KB 0 0 000:00:00
6*.compute.amazonaws.com 1 00.0 KB 0 0 000:00:00
7*.scanner.modat.io 1 00.0 KB 0 0 000:00:00
TOTAL: 7 36 1955.9 KB 6 0 000:03:51

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
174.96.78.81 0.216 0.866 0.00000:03:25
152.32.183.22 0.013 0.033 0.00000:00:11
20.84.99.255 0.007 0.012 0.00000:00:09
56.146.94.167.censys-scanner.com 0.033 0.029 0.00000:00:00
malta.scan.bufferover.run 0.012 0.020 0.00000:00:00
pirate.census.shodan.io 0.006 0.008 0.00000:00:00
147.185.132.115 0.003 0.017 0.00000:00:00
31-14-254-69.infrawat.ch 0.005 0.007 0.00000:00:00
o310.scanner.modat.io 0.006 0.013 0.00000:00:00
69-5-169-41.infrawat.ch 0.007 0.010 0.00000:00:00
194.164.107.4 0.010 0.036 0.00000:00:00
ec2-44-234-253-185.us-west-2.compute.amazonaws.com 0.005 0.014 0.00000:00:00
TOTAL: 12 0.323 1.065 0.00000:03:51

Curious NNRP explorers [Top 20]:

SystemConn
152.32.183.22 3
56.146.94.167.censys-scanner.com 3
malta.scan.bufferover.run 2
147.185.132.115 1
194.164.107.4 1
20.84.99.255 1
31-14-254-69.infrawat.ch 1
69-5-169-41.infrawat.ch 1
ec2-44-234-253-185.us-west-2.compute.amazonaws.com 1
o310.scanner.modat.io 1
pirate.census.shodan.io 1
TOTAL: 11 16

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
malta.scan.bufferover.run 9
152.32.183.22 2
56.146.94.167.censys-scanner.com 1
TOTAL: 3 12

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
?#024 3
#001 2
#026#003#001#001 2
?$?(?#?' 2
#003#004#003#003#003#002#003#001#003 1
#026#003#001 1
EHLO www.censys.io 1
TOTAL: 7 12

NNRP client timeouts [Top 20]:

SystemConnPeer
31-14-254-69.infrawat.ch 1 1
56.146.94.167.censys-scanner.com 1 2
TOTAL: 2 2 5

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1alt 14 73.7%
2comp 2 10.5%
3linux 1 5.3%
4rec 1 5.3%
5talk 1 5.3%
TOTAL: 5 19100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1alt.fan.rush-limbaugh 14
2comp.lang.python 2
3linux.debian.bugs.rc 1
4rec.arts.tv 1
5talk.politics.guns 1
TOTAL: 5 19
innreport from INN 2.7.3 based on initial work (©) 1996-2001 by Fabien Tassin <fta@sofaraway.org> and enhanced by several contributors since then