Daily Usenet report

Nov 28 03:00:02 -- Nov 29 03:00:02

Unknown entries from news log file:

First 1 / 1 lines (100.0%)

Nov 28 03:41:43 news innd: message repeated 2 times: [ ctlinnd command s]

Log entries by program:

Program nameLines%LinesSize%Size
inn 244302 66.8%33.1 MB 71.6%
innd 118405 32.4%12.9 MB 27.8%
innfeed 2385 0.7%251.8 KB 0.5%
nnrpd 384 0.1%39.1 KB 0.1%
controlchan 1 0.0%0.2 KB 0.0%
TOTAL: 5 365477 100.0%46.3 MB100.0%

History cache:

ReasonCount%Count
Negative hits 244117 49.7%
Do not exist 244000 49.6%
Cache misses 2021 0.4%
Positive hits 1416 0.3%
TOTAL: 4 491554 100.0%

INND timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.062 0.0%13 0.000 4.769 30.000
article cleanup00:00:01.327 0.0%244173 0.000 0.005 0.132
article logging00:00:03.548 0.0%244218 0.000 0.015 0.059
article parse00:00:02.186 0.0%715648 0.000 0.003 0.014
article write00:09:35.074 0.7%140243 0.000 4.101 82.269
artlog/artparse00:00:00.000 0.0%1 0.000 0.000 0.000
data move00:00:00.310 0.0%730840 0.000 0.000 0.083
hisgrep/artcncl00:00:00.000 0.0%13 0.000 0.000 0.000
hishave/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:21:07.051 1.5%491923 0.000 2.576 20.230
history sync00:00:00.006 0.0%302 0.000 0.020 1.000
history write00:03:01.720 0.2%244173 0.012 0.744 8.242
hiswrite/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
idle23:18:56.041 97.2%727422 49.261 115.388 3552.765
nntp read00:00:06.823 0.0%726167 0.000 0.009 0.315
overview write00:00:25.116 0.0%140243 0.000 0.179 7.145
perl filter00:05:05.413 0.4%244172 0.417 1.251 9.250
python filter00:00:13.182 0.0%479191 0.000 0.028 0.338
site send00:00:01.053 0.0%140243 0.000 0.008 0.077
TOTAL: 23:59:30.27723:58:38.912 99.9%----

INNfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.201 0.0%143455 0.000 0.001 0.036
article prepare00:00:00.048 0.0%783896 0.000 0.000 0.003
article read00:01:32.651 0.1%133506 0.000 0.694 20.835
backlog stats00:00:00.282 0.0%871283 0.000 0.000 0.009
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:03.646 0.0%534765 0.000 0.007 0.167
data write00:00:06.117 0.0%394763 0.000 0.015 0.059
idle23:57:21.893 99.9%871283 18.752 98.983 10005.000
status file00:00:00.184 0.0%184 0.000 1.000 27.200
TOTAL: 23:59:14.11923:59:05.022100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:31.199 44.5%128 21.800 243.742 10050.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.002 0.0%410 0.000 0.005 0.077
TOTAL: 00:01:10.08300:00:31.201 44.5%----

Control commands to INND:

CommandNumber
flush 2
flushlogs 2
go 2
logmode 2
lowmark 1
mode 143
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 162

Incoming Feeds (INN):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1chimia.se 0 235038 131757 2038 101243 56%23:59:38
2usenet.blueworldhosting.com 1376 11250 7442 1114 2694 66%23:48:03
3news.sklaffkom.se 1 1274 1000 274 0 78%08:12:50
4localhost 25 0 0 0 0 0%00:00:00
5news.thebunker.nu 13 0 0 0 0 0%00:00:01
TOTAL: 5 1415 247562 140199 3426 103937 56%56:00:32
Articles received by server

Incoming Volume (INN):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1chimia.se293.8 MB3.8 KB209.2 MB503.1 MB 58%2.2 KB
2usenet.blueworldhosting.com19.0 MB0.0 KB5.8 MB24.8 MB 76%2.5 KB
3news.sklaffkom.se1.5 MB0.0 KB0.0 KB1.5 MB100%1.5 KB
4localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
5news.thebunker.nu0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 5314.3 MB3.8 KB215.0 MB529.4 MB 59%2.2 KB
Incoming Volume received by server

Incoming articles:

DateArticles%ArtsArt/secSize%SizeKB/sec
Nov 28 03:00:02 - 03:59:59 6620 4.7% 1.8417.4 MB 5.5% 4.94
Nov 28 04:00:00 - 04:59:59 5611 4.0% 1.5613.1 MB 4.2% 3.72
Nov 28 05:00:00 - 05:59:59 5227 3.7% 1.4512.4 MB 3.9% 3.53
Nov 28 06:00:00 - 06:59:59 4830 3.4% 1.3411.5 MB 3.7% 3.27
Nov 28 07:00:00 - 07:59:59 3700 2.6% 1.039.6 MB 3.0% 2.72
Nov 28 08:00:00 - 08:59:59 5228 3.7% 1.4512.6 MB 4.0% 3.57
Nov 28 09:00:00 - 09:59:59 5352 3.8% 1.4913.6 MB 4.3% 3.87
Nov 28 10:00:00 - 10:59:59 6662 4.7% 1.8517.0 MB 5.4% 4.83
Nov 28 11:00:00 - 11:59:59 6553 4.7% 1.8217.1 MB 5.4% 4.86
Nov 28 12:00:00 - 12:59:59 6222 4.4% 1.7315.9 MB 5.1% 4.52
Nov 28 13:00:00 - 13:59:59 7364 5.2% 2.0518.7 MB 5.9% 5.31
Nov 28 14:00:00 - 14:59:59 7311 5.2% 2.0317.7 MB 5.6% 5.04
Nov 28 15:00:00 - 15:59:59 6953 5.0% 1.9313.8 MB 4.4% 3.94
Nov 28 16:00:00 - 16:59:59 6458 4.6% 1.7913.1 MB 4.2% 3.73
Nov 28 17:00:00 - 17:59:59 6089 4.3% 1.6912.4 MB 3.9% 3.51
Nov 28 18:00:00 - 18:59:59 5104 3.6% 1.429.9 MB 3.1% 2.80
Nov 28 19:00:00 - 19:59:59 5604 4.0% 1.5611.2 MB 3.6% 3.18
Nov 28 20:00:00 - 20:59:59 5864 4.2% 1.6311.3 MB 3.6% 3.22
Nov 28 21:00:00 - 21:59:59 5361 3.8% 1.4910.9 MB 3.5% 3.09
Nov 28 22:00:00 - 22:59:59 5274 3.8% 1.4710.1 MB 3.2% 2.89
Nov 28 23:00:00 - 23:59:59 5324 3.8% 1.4810.2 MB 3.2% 2.89
Nov 29 00:00:00 - 00:59:59 5563 4.0% 1.5511.2 MB 3.6% 3.18
Nov 29 01:00:00 - 01:59:59 5912 4.2% 1.6411.5 MB 3.6% 3.26
Nov 29 02:00:00 - 02:59:59 6107 4.4% 1.7012.6 MB 4.0% 3.59
Nov 29 03:00:00 - 03:00:02 5 0.0% 2.507.4 KB 0.0% 3.69
TOTAL: 24:00:00 140298 100.0% 1.62314.5 MB 100.0% 3.73
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1chimia.se101270 0 0 1 0 0 0 0101269
2usenet.blueworldhosting.com 2734 259 0 0 0 0 0 0 2475
TOTAL: 2104004 259 0 1 0 0 0 0103744

Unwanted newsgroups [Top 20]:

NewsgroupCount
hispagatos.hacking.ransomware 12
de.comm.provider.mail 10
hispagatos.mastodon.tag.hacking 9
uk.telecom.mobile 9
de.soc.verkehr 8
de.alt.comm.android 7
de.etc.post 7
pl.sci.fizyka 7
de.comp.lang.php 6
de.sci.physik 6
alt.usenet.legends.lester-mosley 5
de.comm.infosystems.www.authoring.misc 5
de.rec.musik.hifi 5
fido7.xsu.cellular 5
linux.debian.devel.mentors 5
uk.tech.broadcast 5
de.comm.software.browser.misc 4
de.sci.ing.elektrotechnik 4
free.it.scienza.fisica 4
it.arti.cinema 4
TOTAL: 108 259

INND Perl filter [Top 20]:

ReasonCount
EMP (phn path) 65372
EMP (phn nph) 27612
EMP (phl) 9250
EMP (md5) 1073
HTML Multipart 223
Too many newsgroups 86
Too many newsgroups (low_xpost) 32
User-issued cancel 17
HTML post 11
Too many newsgroups (meow) 9
Subject Rejected 8
Scoring filter 4
HTML Image Tags 1
TOTAL: 13 103698

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Bad Message-ID's offered
chimia.se 3
TOTAL: 1 3
Including strange strings
usenet.blueworldhosting.com 41
chimia.se 4
TOTAL: 2 45
No colon-space in header field
usenet.blueworldhosting.com 1
TOTAL: 1 1
TOTAL: 3 49

Outgoing Feeds (innfeed) by Articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1sklaffkom.se 139323 1516 5670132051 0 3228 1%23:59:58
2usenet.blueworldhosting.com 63725 0 983 62476 0 2 0%20:13:15
3sklaff.dev 0 0 0 0 0 140297 0%23:57:45
4thebunker.nu 0 0 0 0 0 140297 0%23:59:58
TOTAL: 4 203048 1516 6653194527 0 283824 0%92:10:56
Outgoing feeds (innfeed) by Articles

Outgoing Feeds (innfeed) by Volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1sklaffkom.se3.3 MB295.6 MB298.8 MB3.5 KB/s2.3 KB23:59:58
2sklaff.dev0.0 KB0.0 KB0.0 KB0.0 KB/s023:57:45
3thebunker.nu0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:58
4usenet.blueworldhosting.com0.0 KB158.7 MB158.7 MB2.2 KB/s2.6 KB20:13:15
TOTAL: 43.3 MB454.3 MB457.6 MB1.4 KB/s2.4 KB92:10:56
Outgoing feeds (innfeed) by Volume

NNRP readership statistics:

SystemConnArtsSizeGroupsPostRejElapsed
181-229-79-101-no600.tbcn.telia.com 13 00.0 KB 0 0 000:00:07
2104.152.52.73 6 00.0 KB 0 0 000:00:04
3o33.scanner.modat.io 5 00.0 KB 0 0 000:00:06
4104.152.52.55 3 00.0 KB 0 0 000:00:01
5104.152.52.65 2 00.0 KB 0 0 000:00:02
6104.152.52.70 2 00.0 KB 0 0 000:00:01
745.211.203.35.bc.googleusercontent.com 2 00.0 KB 0 0 000:00:17
886.210.203.35.bc.googleusercontent.com 2 00.0 KB 0 0 000:00:00
9azpdcg90igxg.stretchoid.com 2 00.0 KB 0 0 000:00:10
10guernsey.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
11104.152.52.56 1 00.0 KB 0 0 000:00:00
12104.152.52.57 1 00.0 KB 0 0 000:00:01
13104.152.52.59 1 00.0 KB 0 0 000:00:00
14104.152.52.62 1 00.0 KB 0 0 000:00:00
15104.152.52.63 1 00.0 KB 0 0 000:00:00
16147.185.133.102 1 00.0 KB 0 0 000:00:05
17147.185.133.98 1 00.0 KB 0 0 000:00:00
18154.47.16.149 1 00.0 KB 0 0 000:00:00
19188.126.79.15 1 00.0 KB 0 0 000:00:00
20205.210.31.205 1 00.0 KB 0 0 000:00:03
21207.90.244.14 1 00.0 KB 0 0 000:00:00
2285.190.239.120 1 00.0 KB 0 0 000:00:00
23ardent.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
24scanner-27.ch1.censys-scanner.com 1 00.0 KB 0 0 000:00:02
TOTAL: 24 53 00.0 KB 0 0 000:01:10

NNRP readership statistics (by domain):

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 25 00.0 KB 0 0 000:00:22
2*.tbcn.telia.com 13 00.0 KB 0 0 000:00:07
3*.scanner.modat.io 5 00.0 KB 0 0 000:00:06
4*.210.203.35.bc.googleusercontent.com 2 00.0 KB 0 0 000:00:00
5*.211.203.35.bc.googleusercontent.com 2 00.0 KB 0 0 000:00:17
6*.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
7*.stretchoid.com 2 00.0 KB 0 0 000:00:10
8*.ch1.censys-scanner.com 1 00.0 KB 0 0 000:00:02
9*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:01
TOTAL: 9 53 00.0 KB 0 0 000:01:10

NNRP auth users [Top 20]:

UserConn
peterlondon 13
TOTAL: 1 13

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
45.211.203.35.bc.googleusercontent.com 0.075 0.015 0.00000:00:17
azpdcg90igxg.stretchoid.com 0.015 0.009 0.00000:00:10
81-229-79-101-no600.tbcn.telia.com 0.107 0.082 0.27400:00:07
o33.scanner.modat.io 0.188 0.027 0.00000:00:06
147.185.133.102 0.040 0.007 0.00000:00:05
104.152.52.73 0.299 0.026 0.00000:00:04
205.210.31.205 0.007 0.006 0.00000:00:03
104.152.52.65 0.084 0.007 0.00000:00:02
scanner-27.ch1.censys-scanner.com 0.041 0.006 0.00000:00:02
ardent.monitoring.internet-measurement.com 0.007 0.007 0.00000:00:01
104.152.52.57 0.037 0.006 0.00000:00:01
104.152.52.55 0.089 0.008 0.00000:00:01
104.152.52.70 0.050 0.009 0.00000:00:01
154.47.16.149 0.007 0.007 0.00000:00:00
207.90.244.14 0.006 0.007 0.00000:00:00
86.210.203.35.bc.googleusercontent.com 0.083 0.007 0.00000:00:00
104.152.52.59 0.041 0.005 0.00000:00:00
85.190.239.120 0.005 0.009 0.00000:00:00
guernsey.scan.bufferover.run 0.013 0.011 0.00000:00:00
104.152.52.56 0.007 0.007 0.00000:00:00
TOTAL: 23 1.292 0.279 0.27400:01:10

NNRP gethostbyaddr failures [Top 20]:

SystemConn
? (can't getpeername) 16
TOTAL: 1 16

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
85.190.239.120 9
104.152.52.56 7
guernsey.scan.bufferover.run 7
154.47.16.149 6
104.152.52.55 5
104.152.52.65 5
104.152.52.70 4
147.185.133.102 4
147.185.133.98 4
188.126.79.15 4
45.211.203.35.bc.googleusercontent.com 4
86.210.203.35.bc.googleusercontent.com 4
104.152.52.73 1
azpdcg90igxg.stretchoid.com 1
o33.scanner.modat.io 1
scanner-27.ch1.censys-scanner.com 1
TOTAL: 16 67

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
GET / HTTP/1.1 8
Accept: */* 5
Accept-Encoding: gzip 4
Host: 109.238.130.155:563 4
#021ì 3
À#024#023#001#023#002#023#003#001 3
#026#003#001#005Æ#001 2
Connection: close 2
EHLO 109.238.130.155 2
Host: 109.238.130.155 2
MAIL FROM:<relaycheck_please_ignore@prot... 2
User-Agent: Hello from Palo Alto Network... 2
User-Agent: curl/7.61.1 2
User-Agent: curl/7.68.0 2
#001 1
#026#003#001 1
#026#003#001#005Ê#001 1
#032ØpjgE®Ë•#‚¸È‘°#027mà#020‚Ë#015!›&ȱ®#013ó»0k¶+ðBÿ“§... 1
#0351z­\õ¼=’žÅA¶S#010#014­DsëË#032§áÀ’œ¿æ¹™Í#010Ì;#007E#025+¡... 1
@–s5ËE|Zúšuõ+¡*¼½ã#031Jc¦‰Iè`Ñ#020•‚æ#016§Ø#037—È6ø&... 1
TOTAL: 38 67

NNRP client timeouts [Top 20]:

SystemConnPeer
104.152.52.65 1 2
104.152.52.70 1 1
147.185.133.102 1 1
147.185.133.98 1 1
45.211.203.35.bc.googleusercontent.com 1 2
85.190.239.120 1 1
86.210.203.35.bc.googleusercontent.com 1 2
o33.scanner.modat.io 1 1
TOTAL: 8 8 14