Daily Usenet report

Nov 6 03:00:04 -- Nov 7 03:00:05

Unknown entries from news log file:

First 50 / 116 lines (43.1%)

Nov 6 03:01:10 twilightnode innd: message repeated 2 times: [ ctlinnd command s]
Nov 6 03:10:20 twilightnode nnrpd[1208685]: Reading access from /usr/local/news/etc/readers.conf
Nov 6 03:10:20 twilightnode nnrpd[1208685]: Auth strategy 'localhost' does not match client. Removing.
Nov 6 03:10:20 twilightnode nnrpd[1208685]: 174.96.78.81 res <anonymous>
Nov 6 03:10:20 twilightnode nnrpd[1208685]: 174.96.78.81 no_match_user <anonymous> <localhost>
Nov 6 03:10:20 twilightnode nnrpd[1208685]: 174.96.78.81 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 6 03:10:20 twilightnode nnrpd[1208685]: 174.96.78.81 match_user <anonymous> <anonymous>
Nov 6 03:10:20 twilightnode nnrpd[1208685]: 174.96.78.81 no_post anonymous-read
Nov 6 03:10:20 twilightnode nnrpd[1208686]: Reading access from /usr/local/news/etc/readers.conf
Nov 6 03:10:20 twilightnode nnrpd[1208686]: Auth strategy 'localhost' does not match client. Removing.
Nov 6 03:10:20 twilightnode nnrpd[1208686]: 174.96.78.81 res <anonymous>
Nov 6 03:10:20 twilightnode nnrpd[1208686]: 174.96.78.81 no_match_user <anonymous> <localhost>
Nov 6 03:10:20 twilightnode nnrpd[1208686]: 174.96.78.81 no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 6 03:10:20 twilightnode nnrpd[1208686]: 174.96.78.81 match_user <anonymous> <anonymous>
Nov 6 03:10:20 twilightnode nnrpd[1208686]: 174.96.78.81 no_post anonymous-read
Nov 6 04:02:41 twilightnode nnrpd[1210900]: Reading access from /usr/local/news/etc/readers.conf
Nov 6 04:02:41 twilightnode nnrpd[1210900]: Auth strategy 'localhost' does not match client. Removing.
Nov 6 04:02:41 twilightnode nnrpd[1210900]: sfo2-145.boron.do.prod.binaryedge.ninja res <anonymous>
Nov 6 04:02:41 twilightnode nnrpd[1210900]: sfo2-145.boron.do.prod.binaryedge.ninja no_match_user <anonymous> <localhost>
Nov 6 04:02:41 twilightnode nnrpd[1210900]: sfo2-145.boron.do.prod.binaryedge.ninja no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 6 04:02:41 twilightnode nnrpd[1210900]: sfo2-145.boron.do.prod.binaryedge.ninja match_user <anonymous> <anonymous>
Nov 6 04:02:41 twilightnode nnrpd[1210900]: sfo2-145.boron.do.prod.binaryedge.ninja no_post anonymous-read
Nov 6 07:32:54 twilightnode nnrpd[1220974]: Reading access from /usr/local/news/etc/readers.conf
Nov 6 07:32:54 twilightnode nnrpd[1220974]: Auth strategy 'localhost' does not match client. Removing.
Nov 6 07:32:54 twilightnode nnrpd[1220974]: 40.195.132.66.censys-scanner.com res <anonymous>
Nov 6 07:32:54 twilightnode nnrpd[1220974]: 40.195.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Nov 6 07:32:54 twilightnode nnrpd[1220974]: 40.195.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 6 07:32:54 twilightnode nnrpd[1220974]: 40.195.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Nov 6 07:32:54 twilightnode nnrpd[1220974]: 40.195.132.66.censys-scanner.com no_post anonymous-read
Nov 6 07:32:57 twilightnode nnrpd[1220974]: 40.195.132.66.censys-scanner.com res <anonymous>
Nov 6 07:32:57 twilightnode nnrpd[1220974]: 40.195.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Nov 6 07:32:57 twilightnode nnrpd[1220974]: 40.195.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 6 07:32:57 twilightnode nnrpd[1220974]: 40.195.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Nov 6 07:32:57 twilightnode nnrpd[1220974]: 40.195.132.66.censys-scanner.com no_post anonymous-read
Nov 6 09:48:42 twilightnode nnrpd[1227172]: Reading access from /usr/local/news/etc/readers.conf
Nov 6 09:48:42 twilightnode nnrpd[1227172]: Auth strategy 'localhost' does not match client. Removing.
Nov 6 09:48:42 twilightnode nnrpd[1227172]: 122.159.132.66.censys-scanner.com res <anonymous>
Nov 6 09:48:42 twilightnode nnrpd[1227172]: 122.159.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Nov 6 09:48:42 twilightnode nnrpd[1227172]: 122.159.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 6 09:48:42 twilightnode nnrpd[1227172]: 122.159.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Nov 6 09:48:42 twilightnode nnrpd[1227172]: 122.159.132.66.censys-scanner.com no_post anonymous-read
Nov 6 09:48:57 twilightnode nnrpd[1227173]: Reading access from /usr/local/news/etc/readers.conf
Nov 6 09:48:57 twilightnode nnrpd[1227173]: Auth strategy 'localhost' does not match client. Removing.
Nov 6 09:48:57 twilightnode nnrpd[1227173]: 122.159.132.66.censys-scanner.com res <anonymous>
Nov 6 09:48:57 twilightnode nnrpd[1227173]: 122.159.132.66.censys-scanner.com no_match_user <anonymous> <localhost>
Nov 6 09:48:57 twilightnode nnrpd[1227173]: 122.159.132.66.censys-scanner.com no_match_user <anonymous> *,!<anonymous>,!<localhost>
Nov 6 09:48:57 twilightnode nnrpd[1227173]: 122.159.132.66.censys-scanner.com match_user <anonymous> <anonymous>
Nov 6 09:48:57 twilightnode nnrpd[1227173]: 122.159.132.66.censys-scanner.com no_post anonymous-read
Nov 6 09:49:00 twilightnode nnrpd[1227174]: Reading access from /usr/local/news/etc/readers.conf
Nov 6 09:49:00 twilightnode nnrpd[1227174]: Auth strategy 'localhost' does not match client. Removing.

Log entries by program:

Program nameLines%LinesSize%Size
inn 7699 54.8%1.3 MB 60.6%
innd 4885 34.8%661.1 KB 29.1%
innfeed 1256 8.9%212.2 KB 9.4%
nnrpd 202 1.4%21.3 KB 0.9%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 14043 100.0%2.2 MB100.0%

History cache:

ReasonCount%Count
Positive hits 21359 53.6%
Negative hits 10895 27.3%
Do not exist 7623 19.1%
Cache misses 5 0.0%
TOTAL: 4 39882 100.0%

innd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.063 0.0%31 0.000 2.032 3.800
article cleanup00:00:00.094 0.0%7681 0.000 0.012 0.316
article logging00:00:00.331 0.0%7703 0.000 0.043 0.250
article parse00:00:00.147 0.0%11166 0.000 0.013 0.387
article write00:00:08.445 0.0%6453 0.692 1.309 2.435
artlog/artparse00:00:00.000 0.0%1 0.000 0.000 0.000
data move00:00:00.441 0.0%43290 0.000 0.010 0.109
hisgrep/artcncl00:00:00.014 0.0%31 0.000 0.452 1.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:00:05.526 0.0%39920 0.051 0.138 0.267
history sync00:00:00.082 0.0%324 0.000 0.253 1.500
history write00:00:04.179 0.0%7631 0.125 0.548 1.069
idle23:59:43.460 99.9%43875 879.801 1968.854 14638.732
nntp read00:00:01.099 0.0%42859 0.000 0.026 0.089
overview write00:00:07.053 0.0%6453 0.400 1.093 3.826
perl filter00:00:13.059 0.0%7630 0.740 1.712 9.500
python filter00:00:01.070 0.0%7630 0.000 0.140 1.222
site send00:00:00.492 0.0%12854 0.000 0.038 0.156
TOTAL: 1824:00:25.555100.0%----

innfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.021 0.0%6755 0.000 0.003 0.100
article prepare00:00:00.003 0.0%28852 0.000 0.000 0.006
article read00:00:01.455 0.0%4615 0.083 0.315 2.000
backlog stats00:00:00.075 0.0%84196 0.000 0.001 0.010
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:00.625 0.0%47608 0.000 0.013 0.036
data write00:00:01.373 0.0%41673 0.009 0.033 0.091
idle23:58:42.690100.0%84196 425.853 1025.259 6667.822
status file00:00:00.204 0.0%164 0.000 1.244 4.000
TOTAL: 923:58:46.446100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:35.890100.0%50 112.500 717.800 9830.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.006 0.0%214 0.000 0.028 0.500
readart00:00:00.000 0.0%4 0.000 0.000 0.000
TOTAL: 400:00:35.896100.0%----

Control commands to innd:

CommandNumber
flush 4
flushlogs 2
go 2
logmode 2
lowmark 1
mode 147
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 168

Incoming feeds (innd):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1twilightnode-out.news.weretis.net 4 12516 4875 7510 131 38%50:35:28
2usenet.blueworldhosting.com 74 7579 1069 5515 995 14%23:57:59
3newsfeed.endofthelinebbs.com 714 6376 351 5937 88 5%25:20:30
4news.sklaffkom.se 42 104 101 3 0 97%10:34:14
5news.tebibyte.org 2 3712 88 3621 3 2%23:59:53
6localhost 25 0 0 0 0 0%00:00:00
TOTAL: 6 861 30287 6484 22586 1217 21%134:28:04
Articles received by server

Incoming volume (innd):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1twilightnode-out.news.weretis.net15.3 MB84.1 KB328.6 KB15.7 MB 97%3.2 KB
2usenet.blueworldhosting.com6.9 MB10.3 KB1.2 MB8.1 MB 85%4.0 KB
3newsfeed.endofthelinebbs.com6.8 MB1.3 KB152.8 KB7.0 MB 97%16.3 KB
4news.tebibyte.org325.4 KB0.0 KB33.4 KB358.8 KB 90%3.9 KB
5news.sklaffkom.se324.1 KB0.0 KB0.0 KB324.1 KB100%3.2 KB
6localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 629.6 MB95.7 KB1.7 MB31.4 MB 94%4.2 KB
Incoming volume received by server

Incoming articles (innd):

DateArticles%ArtsArt/secSize%SizeKB/sec
Nov 6 03:00:04 - 03:59:59 99 1.5% 0.03378.5 KB 1.3% 0.11
Nov 6 04:00:00 - 04:59:59 96 1.5% 0.03616.3 KB 2.2% 0.17
Nov 6 05:00:00 - 05:59:59 101 1.6% 0.03650.9 KB 2.3% 0.18
Nov 6 06:00:00 - 06:59:59 128 2.0% 0.04712.8 KB 2.5% 0.20
Nov 6 07:00:00 - 07:59:59 169 2.6% 0.05776.5 KB 2.7% 0.22
Nov 6 08:00:00 - 08:59:59 241 3.7% 0.071.1 MB 4.0% 0.32
Nov 6 09:00:00 - 09:59:59 317 4.9% 0.091.3 MB 4.5% 0.36
Nov 6 10:00:00 - 10:59:59 368 5.7% 0.101.4 MB 5.0% 0.40
Nov 6 11:00:00 - 11:59:59 430 6.7% 0.121.4 MB 5.0% 0.39
Nov 6 12:00:00 - 12:59:59 427 6.6% 0.121.7 MB 6.0% 0.47
Nov 6 13:00:00 - 13:59:59 346 5.4% 0.101.3 MB 4.6% 0.37
Nov 6 14:00:00 - 14:59:59 321 5.0% 0.091.2 MB 4.2% 0.33
Nov 6 15:00:00 - 15:59:59 377 5.8% 0.103.0 MB 10.6% 0.84
Nov 6 16:00:00 - 16:59:59 345 5.3% 0.101.6 MB 5.7% 0.46
Nov 6 17:00:00 - 17:59:59 324 5.0% 0.091.2 MB 4.3% 0.34
Nov 6 18:00:00 - 18:59:59 333 5.2% 0.091.2 MB 4.5% 0.35
Nov 6 19:00:00 - 19:59:59 355 5.5% 0.101.6 MB 5.7% 0.45
Nov 6 20:00:00 - 20:59:59 343 5.3% 0.101.4 MB 4.9% 0.39
Nov 6 21:00:00 - 21:59:59 252 3.9% 0.071.1 MB 3.8% 0.31
Nov 6 22:00:00 - 22:59:59 280 4.3% 0.081.4 MB 4.9% 0.39
Nov 6 23:00:00 - 23:59:59 307 4.8% 0.091.1 MB 4.0% 0.32
Nov 7 00:00:00 - 00:59:59 254 3.9% 0.071.1 MB 3.9% 0.31
Nov 7 01:00:00 - 01:59:59 127 2.0% 0.04471.7 KB 1.6% 0.13
Nov 7 02:00:00 - 03:00:05 109 1.7% 0.03515.9 KB 1.8% 0.14
TOTAL: 24:00:01 6449 100.0% 0.0728.0 MB 100.0% 0.33
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 995 340 0 8 0 0 0 0 647
2twilightnode-out.news.weretis.net 154 31 0 37 0 0 0 0 86
3newsfeed.endofthelinebbs.com 92 4 0 1 0 0 0 0 87
4news.tebibyte.org 9 3 0 5 0 0 0 0 1
TOTAL: 4 1250 378 0 51 0 0 0 0 821

Unwanted newsgroups [Top 20]:

NewsgroupCount
alt.test.ping 288
hispagatos.hacking.ransomware 27
alt.test.test.jojo 13
alt.politics.communism 12
local.general 11
free.misc 4
hispagatos.mastodon.tag.hacking 4
alt.sports 3
alt.acme.exploding.newsgroup 2
alt.autos.performance-cars 2
hamster.de.tools 2
alt.backup-software 1
alt.bbs.files-announce 1
alt.cellular.motorola 1
alt.f.otqg.g.ut.ruisclbtj 1
alt.journalism.newspapers 1
alt.pl.radio.radiomaryja 1
alt.politics.bush 1
alt.religion.christian.jesus-connection 1
chmurka.statystyki 1
TOTAL: 21 378

Perl filter (innd) [Top 20]:

ReasonCount
EMP (md5) 664
Too many newsgroups 82
User-issued cancel 47
HTML Multipart 4
Too many newsgroups (meow) 1
TOTAL: 5 798

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
twilightnode-out.news.weretis.net 22
TOTAL: 1 22
No colon-space in header field
usenet.blueworldhosting.com 1
TOTAL: 1 1
TOTAL: 2 23

Outgoing feeds (innfeed) by articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.tebibyte.org 8588 2417 3814 168 0 37 28%23:59:56
2sklaffkom.se 6534 1081 1926 3390 0 0 16%23:59:57
3newsfeed.endofthelinebbs.com 10694 83 5919 71 0 267 0%23:58:59
4weretis.net 1681 6 1607 0 0 0 0%23:58:41
5usenet.blueworldhosting.com 8224 2 4900 0 0 48 0%23:59:56
TOTAL: 5 35721 3589 18166 3629 0 352 10%119:57:29
Outgoing feeds (innfeed) by articles

Outgoing feeds (innfeed) by volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.tebibyte.org7.0 MB1.2 MB8.2 MB0.1 KB/s3.2 KB23:59:56
2sklaffkom.se1.9 MB19.1 MB20.9 MB0.2 KB/s4.8 KB23:59:57
3newsfeed.endofthelinebbs.com285.8 KB404.0 KB689.8 KB0.0 KB/s4.5 KB23:58:59
4weretis.net12.5 KB0.0 KB12.5 KB0.0 KB/s2.1 KB23:58:41
5usenet.blueworldhosting.com4.1 KB0.0 KB4.1 KB0.0 KB/s2.1 KB23:59:56
TOTAL: 59.2 MB20.6 MB29.8 MB0.1 KB/s4.2 KB119:57:29
Outgoing feeds (innfeed) by volume

NNRP readership statistics [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1174.96.78.81 2 422.7 KB 3 0 000:00:08
TOTAL: 1 2 422.7 KB 3 0 000:00:08

NNRP connection statistics (by domain) [Top 100]:

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 5 422.7 KB 3 0 000:00:19
2*.66.censys-scanner.com 6 00.0 KB 0 0 000:00:13
3*.infrawat.ch 2 00.0 KB 0 0 000:00:00
4*.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
5*.prod.binaryedge.ninja 1 00.0 KB 0 0 000:00:02
TOTAL: 5 15 422.7 KB 3 0 000:00:35

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
122.159.132.66.censys-scanner.com 0.051 0.053 0.00000:00:10
20.80.75.148 0.004 0.021 0.00000:00:09
174.96.78.81 0.017 0.031 0.00000:00:08
40.195.132.66.censys-scanner.com 0.029 0.019 0.00000:00:03
sfo2-145.boron.do.prod.binaryedge.ninja 0.011 0.008 0.00000:00:02
205.210.31.199 0.005 0.011 0.00000:00:00
69-5-169-112.infrawat.ch 0.005 0.020 0.00000:00:00
193-176-29-30.infrawat.ch 0.004 0.008 0.00000:00:00
164.148.239.35.bc.googleusercontent.com 0.006 0.016 0.00000:00:00
198.235.24.140 0.007 0.009 0.00000:00:00
TOTAL: 10 0.139 0.196 0.00000:00:35

Curious NNRP explorers [Top 20]:

SystemConn
122.159.132.66.censys-scanner.com 5
164.148.239.35.bc.googleusercontent.com 1
193-176-29-30.infrawat.ch 1
198.235.24.140 1
20.80.75.148 1
205.210.31.199 1
40.195.132.66.censys-scanner.com 1
69-5-169-112.infrawat.ch 1
sfo2-145.boron.do.prod.binaryedge.ninja 1
TOTAL: 9 13

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
164.148.239.35.bc.googleusercontent.com 4
122.159.132.66.censys-scanner.com 1
40.195.132.66.censys-scanner.com 1
TOTAL: 3 6

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 2
#026#003#001#001$#001 1
?#024 1
?#?' 1
EU?.!?]?[#036-? ?#014?#021?2?v? ?a?Z'?#011xeZ?j... 1
TOTAL: 5 6

NNRP client timeouts [Top 20]:

SystemConnPeer
122.159.132.66.censys-scanner.com 1 4
164.148.239.35.bc.googleusercontent.com 1 1
193-176-29-30.infrawat.ch 1 1
TOTAL: 3 3 9

Newsgroup request counts (by hierarchy) [Top 100]:

HierarchyCountPct
1de 2 50.0%
2comp 1 25.0%
3linux 1 25.0%
TOTAL: 3 4100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1de.etc.fahrzeug.auto 2
2comp.os.linux.misc 1
3linux.debian.bugs.rc 1
TOTAL: 3 4