Daily Usenet report

Oct 2 03:00:01 -- Oct 3 03:00:01

Unknown entries from news log file:

First 48 / 48 lines (100.0%)

Oct 2 03:20:14 news innd: message repeated 2 times: [ ctlinnd command s]
Oct 2 04:57:37 news nnrpd[836297]: 123.150.138.194 load 16.77 > 16
Oct 2 04:57:37 news nnrpd[836559]: 123.150.138.194 load 16.77 > 16
Oct 2 04:57:38 news nnrpd[836622]: 123.150.138.194 load 16.63 > 16
Oct 2 04:57:38 news nnrpd[836734]: 123.150.138.194 load 16.63 > 16
Oct 2 04:57:39 news nnrpd[836848]: 123.150.138.194 load 16.63 > 16
Oct 2 04:57:39 news nnrpd[836957]: 123.150.138.194 load 16.63 > 16
Oct 2 04:57:40 news nnrpd[837080]: 123.150.138.194 load 16.63 > 16
Oct 2 04:57:40 news nnrpd[837213]: 123.150.138.194 load 16.63 > 16
Oct 2 04:57:41 news nnrpd[837338]: 123.150.138.194 load 16.63 > 16
Oct 2 04:57:41 news nnrpd[837450]: 123.150.138.194 load 16.63 > 16
Oct 2 04:57:42 news nnrpd[837586]: 123.150.138.194 load 16.63 > 16
Oct 2 04:57:42 news nnrpd[837686]: 123.150.138.194 load 16.63 > 16
Oct 2 06:53:58 news nnrpd[2130911]: 204.76.203.231 load 103.90 > 16
Oct 2 06:54:31 news nnrpd[2142437]: 167.94.146.54 load 73.18 > 16
Oct 2 06:54:35 news nnrpd[2143592]: 167.94.146.54 load 68.76 > 16
Oct 2 06:54:38 news nnrpd[2144528]: 167.94.146.54 load 68.76 > 16
Oct 2 06:54:41 news nnrpd[2145555]: 167.94.146.54 load 64.22 > 16
Oct 2 16:59:41 news nnrpd[2596733]: filter: Syntax check: postfilter.conf
Oct 2 16:59:41 news nnrpd[2596733]: filter: Analyzing message <10bm40t$2f7rr$1@news.chimia.se>, MD5 KA15ZHTDKguwmV3TTULGQQ
Oct 2 16:59:41 news nnrpd[2596733]: filter: Message comes from localhost, DNSBL check is not needed
Oct 2 16:59:41 news nnrpd[2596733]: filter: No URI in the body, skipping URIBL checks
Oct 2 16:59:41 news nnrpd[2596733]: filter: Message comes from 127.0.0.1 that can't be a TOR router or an onion domain, TOR check is not needed
Oct 2 16:59:41 news nnrpd[2596733]: filter: Checking user's rights: IP 127.0.0.1
Oct 2 16:59:41 news nnrpd[2596733]: filter: Multipost: 1
Oct 2 16:59:41 news nnrpd[2596733]: filter: Checking user's rights: Domain localhost
Oct 2 16:59:41 news nnrpd[2596733]: filter: Multipost: 1
Oct 2 16:59:41 news nnrpd[2596733]: filter: Message <10bm40t$2f7rr$1@news.chimia.se> accepted
Oct 2 16:59:52 news nnrpd[2596749]: filter: Syntax check: postfilter.conf
Oct 2 16:59:52 news nnrpd[2596749]: filter: Analyzing message <10bm418$2f7sc$1@news.chimia.se>, MD5 oGVu5NCwXBoPixkFhl24vA
Oct 2 16:59:52 news nnrpd[2596749]: filter: Message comes from localhost, DNSBL check is not needed
Oct 2 16:59:52 news nnrpd[2596749]: filter: No URI in the body, skipping URIBL checks
Oct 2 16:59:52 news nnrpd[2596749]: filter: Message comes from 127.0.0.1 that can't be a TOR router or an onion domain, TOR check is not needed
Oct 2 16:59:52 news nnrpd[2596749]: filter: Checking user's rights: IP 127.0.0.1
Oct 2 16:59:52 news nnrpd[2596749]: filter: Multipost: 1
Oct 2 16:59:52 news nnrpd[2596749]: filter: Checking user's rights: Domain localhost
Oct 2 16:59:52 news nnrpd[2596749]: filter: Multipost: 1
Oct 2 16:59:52 news nnrpd[2596749]: filter: Message <10bm418$2f7sc$1@news.chimia.se> accepted
Oct 2 17:05:21 news nnrpd[2597533]: filter: Syntax check: postfilter.conf
Oct 2 17:05:21 news nnrpd[2597533]: filter: Analyzing message <10bm4bh$2f8ks$1@news.chimia.se>, MD5 /jH48amv54hythPrJ8e+yw
Oct 2 17:05:21 news nnrpd[2597533]: filter: Message comes from localhost, DNSBL check is not needed
Oct 2 17:05:21 news nnrpd[2597533]: filter: No URI in the body, skipping URIBL checks
Oct 2 17:05:21 news nnrpd[2597533]: filter: Message comes from 127.0.0.1 that can't be a TOR router or an onion domain, TOR check is not needed
Oct 2 17:05:21 news nnrpd[2597533]: filter: Checking user's rights: IP 127.0.0.1
Oct 2 17:05:21 news nnrpd[2597533]: filter: Multipost: 1
Oct 2 17:05:21 news nnrpd[2597533]: filter: Checking user's rights: Domain localhost
Oct 2 17:05:21 news nnrpd[2597533]: filter: Multipost: 1
Oct 2 17:05:21 news nnrpd[2597533]: filter: Message <10bm4bh$2f8ks$1@news.chimia.se> accepted

Log entries by program:

Program nameLines%LinesSize%Size
inn 81099 74.4%13.9 MB 79.5%
innd 25146 23.1%3.3 MB 18.9%
innfeed 2340 2.1%241.8 KB 1.4%
nnrpd 406 0.4%40.7 KB 0.2%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 5 108992 100.0%17.5 MB100.0%

History cache:

ReasonCount%Count
Negative hits 84537 47.4%
Do not exist 81017 45.4%
Positive hits 11828 6.6%
Cache misses 1032 0.6%
TOTAL: 4 178414 100.0%

INND timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.098 0.0%5 0.000 19.600 48.000
article cleanup00:00:00.498 0.0%81035 0.000 0.006 1.000
article logging00:00:01.671 0.0%81089 0.000 0.021 2.571
article parse00:00:00.866 0.0%226647 0.000 0.004 1.000
article write00:11:29.541 0.8%65529 0.000 10.523 1289.000
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.647 0.0%247148 0.000 0.003 7.667
hisgrep/artcncl00:00:00.003 0.0%5 0.000 0.600 1.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:04:50.979 0.3%178483 0.000 1.630 399.000
history sync00:00:01.925 0.0%1216 0.000 1.583 716.000
history write00:01:22.858 0.1%81034 0.000 1.023 55.000
idle23:35:54.750 98.3%249907 47.613 339.945 60072.000
nntp read00:00:03.433 0.0%248806 0.000 0.014 238.000
overview write00:00:22.325 0.0%65529 0.000 0.341 226.000
perl filter00:03:23.286 0.2%81034 0.000 2.509 2637.714
python filter00:00:07.842 0.0%152780 0.000 0.051 144.875
site send00:00:00.824 0.0%65529 0.000 0.013 1.000
TOTAL: 23:59:58.44723:57:41.546 99.8%----

INNfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.133 0.0%65981 0.000 0.002 0.857
article prepare00:00:00.052 0.0%686784 0.000 0.000 0.250
article read00:00:16.338 0.0%58221 0.000 0.281 42.000
backlog stats00:00:00.363 0.0%665408 0.000 0.001 19.000
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:03.469 0.0%424981 0.000 0.008 0.333
data write00:00:04.904 0.0%360482 0.000 0.014 0.500
idle23:58:43.788 99.9%665408 29.884 129.731 30102.000
status file00:00:02.700 0.0%194 0.000 13.918 444.000
TOTAL: 23:59:53.30423:59:11.747100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:21.159 57.5%103 0.000 205.427 10049.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.006 0.0%297 0.000 0.020 0.176
TOTAL: 00:00:36.82400:00:21.165 57.5%----

Control commands to INND:

CommandNumber
flush 2
flushlogs 2
go 4
logmode 2
lowmark 1
mode 149
name 3
pause 2
paused 2
reload 2
reserve 2
throttle 4
TOTAL: 12 175

Incoming Feeds (INN):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1chimia.se 5 71748 57150 1260 13338 79%06:48:35
2usenet.blueworldhosting.com 290 10553 5375 3084 2094 50%23:21:42
3news.sklaff.dev 4 9416 2185 7159 72 23%22:38:48
4news.sklaffkom.se 6 1926 801 1125 0 41%12:55:04
5localhost 28 3 3 0 0 100%00:00:00
6news.thebunker.nu 8 0 0 0 0 0%00:00:00
TOTAL: 6 341 93646 65514 12628 15504 69%65:44:09
Articles received by server

Incoming Volume (INN):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1chimia.se109.3 MB2.5 KB26.2 MB135.5 MB 80%2.0 KB
2usenet.blueworldhosting.com15.3 MB0.0 KB7.1 MB22.4 MB 68%3.1 KB
3news.sklaff.dev7.3 MB0.0 KB156.4 KB7.4 MB 97%3.4 KB
4news.sklaffkom.se1.1 MB0.0 KB0.0 KB1.1 MB100%1.4 KB
5localhost3.6 KB0.0 KB0.0 KB3.6 KB100%1.2 KB
6news.thebunker.nu0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 6132.9 MB2.5 KB33.5 MB166.4 MB 79%2.1 KB
Incoming Volume received by server

Incoming articles:

DateArticles%ArtsArt/secSize%SizeKB/sec
Oct 2 03:00:01 - 03:59:59 250 0.4% 0.07624.5 KB 0.5% 0.17
Oct 2 04:00:00 - 04:59:59 276 0.4% 0.08699.6 KB 0.5% 0.19
Oct 2 05:00:00 - 05:59:59 247 0.4% 0.07498.5 KB 0.4% 0.14
Oct 2 06:00:00 - 06:59:59 223 0.3% 0.06485.2 KB 0.4% 0.13
Oct 2 07:00:00 - 07:59:59 257 0.4% 0.07542.3 KB 0.4% 0.15
Oct 2 08:00:00 - 08:59:59 316 0.5% 0.09593.1 KB 0.4% 0.16
Oct 2 09:00:00 - 09:59:59 363 0.6% 0.10872.0 KB 0.6% 0.24
Oct 2 10:00:00 - 10:59:59 466 0.7% 0.131.8 MB 1.3% 0.50
Oct 2 11:00:00 - 11:59:59 395 0.6% 0.11914.6 KB 0.7% 0.25
Oct 2 12:00:00 - 12:59:59 339 0.5% 0.09662.9 KB 0.5% 0.18
Oct 2 13:00:00 - 13:59:59 419 0.6% 0.12954.9 KB 0.7% 0.27
Oct 2 14:00:00 - 14:59:59 395 0.6% 0.111.3 MB 1.0% 0.36
Oct 2 15:00:00 - 15:59:59 408 0.6% 0.11972.1 KB 0.7% 0.27
Oct 2 16:00:00 - 16:59:59 380 0.6% 0.11830.9 KB 0.6% 0.23
Oct 2 17:00:00 - 17:59:59 396 0.6% 0.11982.9 KB 0.7% 0.27
Oct 2 18:00:00 - 18:59:59 430 0.7% 0.12956.2 KB 0.7% 0.27
Oct 2 19:00:00 - 19:59:59 467 0.7% 0.131.3 MB 1.0% 0.36
Oct 2 20:00:00 - 20:59:59 7383 11.3% 2.0516.9 MB 12.7% 4.81
Oct 2 21:00:00 - 21:59:59 8125 12.4% 2.2615.7 MB 11.8% 4.48
Oct 2 22:00:00 - 22:59:59 8522 13.0% 2.3714.5 MB 10.9% 4.13
Oct 2 23:00:00 - 23:59:59 8514 13.0% 2.3716.8 MB 12.6% 4.78
Oct 3 00:00:00 - 00:59:59 9454 14.4% 2.6318.9 MB 14.2% 5.38
Oct 3 01:00:00 - 01:59:59 9255 14.1% 2.5718.9 MB 14.2% 5.37
Oct 3 02:00:00 - 02:59:59 8252 12.6% 2.2916.6 MB 12.5% 4.72
Oct 3 03:00:00 - 03:00:01 10 0.0% 10.0017.5 KB 0.0% 17.48
TOTAL: 24:00:00 65542 100.0% 0.76133.1 MB 100.0% 1.58
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1chimia.se 13338 0 0 1 0 0 0 013337
2usenet.blueworldhosting.com 2137 582 0 0 0 0 0 0 1555
3news.sklaff.dev 80 0 0 0 0 0 0 0 80
4localhost 1 0 0 0 0 0 0 0 1
5news.sklaffkom.se 1 0 0 0 0 0 0 0 1
TOTAL: 5 15557 582 0 1 0 0 0 014974

Unwanted newsgroups [Top 20]:

NewsgroupCount
de.comm.provider.usenet 58
hispagatos.hacking.exploits 50
reader.xsnews.nl 30
hispagatos.mastodon.tag.hacking 25
fr.rec.bricolage 24
free.it.scienza.fisica 21
hispagatos.mastodon.tag.hispagatos 21
hispagatos.mastodon.tag.hackers 20
hispagatos.mastodon.tag.hackthebox 20
linux.ubuntu.security.announce 17
cn.culture.arts.story 15
de.alt.fan.aldi 13
muc.lists.freebsd.emulation 11
de.newusers.infos 10
alt.usenet.legends.lester-mosley 9
it.discussioni.geometri 9
linux.debian.project 8
sfnet.huuhaa 7
aus.computers 6
fr.rec.moto 6
TOTAL: 135 582

INND Perl filter [Top 20]:

ReasonCount
EMP (phn nph) 7342
EMP (phn path) 4864
EMP (md5) 1328
EMP (phl) 1117
Too many newsgroups 203
Subject Rejected 25
HTML Multipart 22
User-issued cancel 11
Scoring filter 4
Too many newsgroups (low_xpost) 3
HTML Image Tags 1
TOTAL: 11 14920

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Bad Message-ID's offered
chimia.se 4
TOTAL: 1 4
Including strange strings
usenet.blueworldhosting.com 43
news.sklaff.dev 8
localhost 1
news.sklaffkom.se 1
TOTAL: 4 53
TOTAL: 2 57

Outgoing Feeds (innfeed) by Articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1sklaff.dev 64392 1726 5816 55804 0 5 2%23:55:14
2sklaffkom.se 65644 143 6640 57926 0 144 0%23:55:14
3usenet.blueworldhosting.com 61090 7 3822 56134 0 312 0%23:41:30
4thebunker.nu 0 0 0 0 0 65540 0%23:59:58
TOTAL: 4 191126 1876 16278169864 0 66001 0%95:31:56
Outgoing feeds (innfeed) by Articles

Outgoing Feeds (innfeed) by Volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1sklaff.dev3.5 MB106.6 MB110.1 MB1.3 KB/s2.0 KB23:55:14
2sklaffkom.se129.0 KB112.1 MB112.3 MB1.3 KB/s2.0 KB23:55:14
3usenet.blueworldhosting.com8.0 KB107.5 MB107.5 MB1.3 KB/s2.0 KB23:41:30
4thebunker.nu0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:58
TOTAL: 43.6 MB326.3 MB329.9 MB1.0 KB/s2.0 KB95:31:56
Outgoing feeds (innfeed) by Volume

NNRP readership statistics:

SystemConnArtsSizeGroupsPostRejElapsed
1123.150.138.194 14 00.0 KB 0 0 000:00:01
281-229-79-101-no600.tbcn.telia.com 8 00.0 KB 0 0 000:00:03
3104.152.52.223 4 00.0 KB 0 0 000:00:00
4167.94.146.54 4 00.0 KB 0 0 000:00:00
5212.102.40.218 4 00.0 KB 0 0 000:00:00
6localhost 3 00.0 KB 0 3 000:00:00
7147.185.132.245 2 00.0 KB 0 0 000:00:01
8147.185.133.82 2 00.0 KB 0 0 000:00:00
9azpdwsn3xtb1.stretchoid.com 2 00.0 KB 0 0 000:00:10
10c-5eea5f51-74736162.cust.telenor.se 2 00.0 KB 0 0 000:00:00
11104.152.52.66 1 00.0 KB 0 0 000:00:00
12104.152.52.70 1 00.0 KB 0 0 000:00:00
13172-236-228-111.ip.linodeusercontent.com 1 00.0 KB 0 0 000:00:02
14198.235.24.40 1 00.0 KB 0 0 000:00:03
15204.76.203.231 1 00.0 KB 0 0 000:00:00
16205.210.31.239 1 00.0 KB 0 0 000:00:02
1737.149.216.162.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
1845-33-14-5.ip.linodeusercontent.com 1 00.0 KB 0 0 000:00:00
1987.149.216.162.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
20compassionate.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:00
21cute.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:00
22idyllic.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:03
23intelligent.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:03
24unrivalled.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:00
25upright.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:00
TOTAL: 25 60 00.0 KB 0 3 000:00:36

NNRP readership statistics (by domain):

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 35 00.0 KB 0 0 000:00:11
2*.tbcn.telia.com 8 00.0 KB 0 0 000:00:03
3*.monitoring.internet-measurement.com 6 00.0 KB 0 0 000:00:06
4? 3 00.0 KB 0 3 000:00:00
5*.149.216.162.bc.googleusercontent.com 2 00.0 KB 0 0 000:00:00
6*.cust.telenor.se 2 00.0 KB 0 0 000:00:00
7*.ip.linodeusercontent.com 2 00.0 KB 0 0 000:00:02
8*.stretchoid.com 2 00.0 KB 0 0 000:00:10
TOTAL: 8 60 00.0 KB 0 3 000:00:36

NNRP auth users [Top 20]:

UserConn
peterlondon 10
TOTAL: 1 10

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
azpdwsn3xtb1.stretchoid.com 0.015 0.013 0.00000:00:10
81-229-79-101-no600.tbcn.telia.com 0.080 0.067 0.17900:00:03
198.235.24.40 0.009 0.004 0.00000:00:03
idyllic.monitoring.internet-measurement.com 0.040 0.006 0.00000:00:03
intelligent.monitoring.internet-measurement.com 0.052 0.017 0.00000:00:03
205.210.31.239 0.006 0.008 0.00000:00:02
172-236-228-111.ip.linodeusercontent.com 0.067 0.019 0.00000:00:02
147.185.132.245 0.094 0.010 0.00000:00:01
123.150.138.194 0.115 0.064 0.00000:00:01
c-5eea5f51-74736162.cust.telenor.se 0.018 0.011 0.04100:00:00
104.152.52.223 0.280 0.027 0.00000:00:00
104.152.52.70 0.074 0.009 0.00000:00:00
localhost 0.293 0.080 0.00000:00:00
147.185.133.82 0.084 0.013 0.00000:00:00
104.152.52.66 0.009 0.004 0.00000:00:00
37.149.216.162.bc.googleusercontent.com 0.068 0.009 0.00000:00:00
87.149.216.162.bc.googleusercontent.com 0.042 0.006 0.00000:00:00
212.102.40.218 0.164 0.022 0.00000:00:00
upright.monitoring.internet-measurement.com 0.048 0.003 0.00000:00:00
45-33-14-5.ip.linodeusercontent.com 0.041 0.003 0.00000:00:00
TOTAL: 22 1.647 0.428 0.22000:00:36

NNRP gethostbyaddr failures [Top 20]:

SystemConn
? (can't getpeername) 19
TOTAL: 1 19

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
147.185.132.245 4
147.185.133.82 4
37.149.216.162.bc.googleusercontent.com 4
87.149.216.162.bc.googleusercontent.com 4
104.152.52.66 2
104.152.52.70 2
123.150.138.194 1
azpdwsn3xtb1.stretchoid.com 1
TOTAL: 8 22

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
GET / HTTP/1.1 4
Host: 109.238.130.155:563 4
Accept-Encoding: gzip 2
Accept: */* 2
EHLO 109.238.130.155 2
MAIL FROM:<relaycheck_please_ignore@prot... 2
User-Agent: Hello from Palo Alto Network... 2
User-Agent: curl/7.68.0 2
#026#003 1
MGLNDD_109.238.130.155_119 1
TOTAL: 10 22

NNRP client timeouts [Top 20]:

SystemConnPeer
104.152.52.70 1 1
147.185.132.245 1 2
147.185.133.82 1 2
37.149.216.162.bc.googleusercontent.com 1 1
87.149.216.162.bc.googleusercontent.com 1 1
TOTAL: 5 5 10
innreport from INN 2.7.2 based on initial work (©) 1996-2001 by Fabien Tassin <fta@sofaraway.org> and enhanced by several contributors since then