Daily Usenet report

Dec 6 03:00:01 -- Dec 7 03:00:02

Unknown entries from news log file:

First 1 / 1 lines (100.0%)

Dec 6 03:30:49 news innd: message repeated 2 times: [ ctlinnd command s]

Log entries by program:

Program nameLines%LinesSize%Size
inn 202641 70.3%28.1 MB 74.7%
innd 83124 28.8%9.3 MB 24.7%
innfeed 2298 0.8%232.5 KB 0.6%
nnrpd 226 0.1%23.8 KB 0.1%
controlchan 1 0.0%0.1 KB 0.0%
rnews 1 0.0%0.1 KB 0.0%
TOTAL: 6 288291 100.0%37.6 MB100.0%

History cache:

ReasonCount%Count
Do not exist 202618 49.8%
Negative hits 202571 49.8%
Cache misses 1363 0.3%
Positive hits 427 0.1%
TOTAL: 4 406979 100.0%

INND timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.264 0.0%12 0.000 22.000 45.000
article cleanup00:00:00.917 0.0%202595 0.000 0.005 0.143
article logging00:00:02.961 0.0%202641 0.000 0.015 0.125
article parse00:00:01.731 0.0%592868 0.000 0.003 0.050
article write00:08:11.041 0.6%130663 0.000 3.758 701.000
artlog/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
artlog/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
data move00:00:00.250 0.0%601442 0.000 0.000 1.500
hisgrep/artcncl00:00:00.002 0.0%12 0.000 0.167 1.000
hishave/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
hissync/artwrite00:00:00.000 0.0%0 0.000 0.000 0.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:18:59.068 1.3%406979 0.000 2.799 21.821
history sync00:00:00.032 0.0%493 0.000 0.065 20.000
history write00:03:17.144 0.2%202594 0.000 0.973 31.000
hiswrite/artparse00:00:00.000 0.0%0 0.000 0.000 0.000
idle23:23:34.031 97.5%601342 19.922 140.043 60060.000
nntp read00:00:05.150 0.0%600233 0.000 0.009 7.500
overview write00:00:22.567 0.0%130663 0.000 0.173 58.000
perl filter00:04:30.146 0.3%202594 0.000 1.333 41.000
python filter00:00:10.406 0.0%397180 0.000 0.026 0.347
site send00:00:01.027 0.0%130663 0.000 0.008 0.091
TOTAL: 23:59:59.21323:59:16.737100.0%----

INNfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.206 0.0%130663 0.000 0.002 0.056
article prepare00:00:00.029 0.0%596392 0.000 0.000 0.006
article read00:00:54.637 0.1%119291 0.000 0.458 6.000
backlog stats00:00:00.200 0.0%728055 0.000 0.000 0.013
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:02.978 0.0%443292 0.000 0.007 0.250
data write00:00:04.553 0.0%313506 0.000 0.015 0.333
idle23:58:33.463 99.9%728055 21.051 118.553 30100.000
status file00:00:00.492 0.0%196 0.000 2.510 202.500
TOTAL: 23:59:43.63923:59:36.558100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle00:00:27.588 49.4%82 25.143 336.439 6104.000
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:00.001 0.0%308 0.000 0.003 0.021
TOTAL: 00:00:55.80200:00:27.589 49.4%----

Control commands to INND:

CommandNumber
flush 2
flushlogs 2
go 1
logmode 2
lowmark 1
mode 144
name 2
pause 1
paused 1
reload 2
TOTAL: 10 158

Incoming Feeds (INN):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1chimia.se 3 194586 122555 1789 70242 62%23:20:34
2usenet.blueworldhosting.com 732 9796 8106 0 1690 82%23:02:09
3localhost 24 0 0 0 0 0%00:00:01
4news.thebunker.nu 6 0 0 0 0 0%00:00:00
TOTAL: 4 765 204382 130661 1789 71932 63%46:22:44
Articles received by server

Incoming Volume (INN):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1chimia.se260.1 MB10.7 KB139.9 MB400.0 MB 65%2.1 KB
2usenet.blueworldhosting.com17.7 MB0.0 KB3.4 MB21.1 MB 83%2.2 KB
3localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
4news.thebunker.nu0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 4277.7 MB10.7 KB143.3 MB421.1 MB 65%2.1 KB
Incoming Volume received by server

Incoming articles:

DateArticles%ArtsArt/secSize%SizeKB/sec
Dec 6 03:00:01 - 03:59:59 4289 3.3% 1.1910.9 MB 3.9% 3.09
Dec 6 04:00:00 - 04:59:59 6343 4.9% 1.7612.9 MB 4.6% 3.67
Dec 6 05:00:00 - 05:59:59 6194 4.7% 1.7212.8 MB 4.6% 3.64
Dec 6 06:00:00 - 06:59:59 6433 4.9% 1.7913.9 MB 5.0% 3.96
Dec 6 07:00:00 - 07:59:59 6051 4.6% 1.6811.2 MB 4.0% 3.18
Dec 6 08:00:00 - 08:59:59 6252 4.8% 1.7411.6 MB 4.2% 3.31
Dec 6 09:00:00 - 09:59:59 5573 4.3% 1.5510.5 MB 3.8% 2.99
Dec 6 10:00:00 - 10:59:59 5273 4.0% 1.4610.7 MB 3.8% 3.04
Dec 6 11:00:00 - 11:59:59 5547 4.2% 1.5411.1 MB 4.0% 3.17
Dec 6 12:00:00 - 12:59:59 5625 4.3% 1.5611.6 MB 4.2% 3.30
Dec 6 13:00:00 - 13:59:59 5430 4.2% 1.5111.4 MB 4.1% 3.23
Dec 6 14:00:00 - 14:59:59 7511 5.7% 2.0925.0 MB 9.0% 7.11
Dec 6 15:00:00 - 15:59:59 8856 6.8% 2.4620.1 MB 7.2% 5.72
Dec 6 16:00:00 - 16:59:59 8170 6.3% 2.2718.6 MB 6.7% 5.29
Dec 6 17:00:00 - 17:59:59 7654 5.9% 2.1315.4 MB 5.5% 4.37
Dec 6 18:00:00 - 18:59:59 8107 6.2% 2.2516.2 MB 5.8% 4.60
Dec 6 19:00:00 - 19:59:59 7509 5.7% 2.0914.9 MB 5.4% 4.24
Dec 6 20:00:00 - 20:59:59 6603 5.1% 1.8312.9 MB 4.7% 3.68
Dec 6 21:00:00 - 21:59:59 2524 1.9% 0.705.0 MB 1.8% 1.42
Dec 6 22:00:00 - 22:59:59 1599 1.2% 0.443.1 MB 1.1% 0.87
Dec 6 23:00:00 - 23:59:59 3192 2.4% 0.896.4 MB 2.3% 1.81
Dec 7 00:00:00 - 00:59:59 2349 1.8% 0.654.4 MB 1.6% 1.26
Dec 7 01:00:00 - 01:59:59 2539 1.9% 0.715.3 MB 1.9% 1.52
Dec 7 02:00:00 - 03:00:02 1040 0.8% 0.291.9 MB 0.7% 0.54
TOTAL: 24:00:01 130663 100.0% 1.51277.7 MB 100.0% 3.29
Incoming articles
Incoming articles (size)

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1chimia.se 70247 0 0 1 2 0 0 070244
2usenet.blueworldhosting.com 1731 327 0 0 0 0 0 0 1404
TOTAL: 2 71978 327 0 1 2 0 0 071648

Unwanted newsgroups [Top 20]:

NewsgroupCount
de.sci.ing.elektrotechnik 28
hispagatos.hacking.ransomware 20
newsreader.test 17
uk.tech.broadcast 13
free.it.scienza.fisica 12
pl.comp.pecet 11
linux.debian.devel.mentors 10
linux.debian.maint.python 10
uk.telecom.voip 10
linux.debian.project 9
muc.lists.netbsd.port.mips 9
hispagatos.mastodon.tag.hacking 8
muc.lists.freebsd.multimedia 7
muc.lists.netbsd.port.sparc 7
de.etc.post 6
fido7.starper.limited 6
free.willey 6
pl.misc.kolej 6
bln.test 5
de.rec.sport.fussball 5
TOTAL: 105 327

Supposedly-moderated groups with unmoderated postings [Top 20]:

GroupsCount
news.newusers.questions 2
TOTAL: 1 2

INND Perl filter [Top 20]:

ReasonCount
EMP (phn path) 31333
EMP (phn nph) 28169
EMP (phl) 10145
EMP (md5) 1019
HTML Multipart 412
User-issued cancel 251
Too many newsgroups 115
Subject Rejected 71
MI5 Filter 41
Scoring filter 13
Too many newsgroups (low_xpost) 13
Too many newsgroups (meow) 8
HTML post 6
Binary: misplaced binary 3
Binary Image: misplaced gif 1
HTML Image Tags 1
Too many test groups in crosspost 1
TOTAL: 17 71602

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Bad Message-ID's offered
usenet.blueworldhosting.com 1
TOTAL: 1 1
Including strange strings
usenet.blueworldhosting.com 41
chimia.se 5
TOTAL: 2 46
TOTAL: 2 47

Outgoing Feeds (innfeed) by Articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1sklaffkom.se 130774 1428 12684116546 0 0 1%23:38:00
2usenet.blueworldhosting.com 33565 0 2441 31124 0 0 0%05:06:20
3sklaff.dev 0 0 0 0 0 130658 0%23:57:44
4thebunker.nu 0 0 0 0 0 130658 0%23:59:58
TOTAL: 4 164339 1428 15125147670 0 261316 0%76:42:02
Outgoing feeds (innfeed) by Articles

Outgoing Feeds (innfeed) by Volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1sklaffkom.se2.3 MB245.1 MB247.4 MB3.0 KB/s2.1 KB23:38:00
2sklaff.dev0.0 KB0.0 KB0.0 KB0.0 KB/s023:57:44
3thebunker.nu0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:58
4usenet.blueworldhosting.com0.0 KB73.4 MB73.4 MB4.1 KB/s2.4 KB05:06:20
TOTAL: 42.3 MB318.5 MB320.8 MB1.2 KB/s2.2 KB76:42:02
Outgoing feeds (innfeed) by Volume

Rnews connections rejected:

ReasonConn
400 No space left on device writing SMstore file -- throttling 1
TOTAL: 1 1

NNRP readership statistics:

SystemConnArtsSizeGroupsPostRejElapsed
181-229-79-101-no600.tbcn.telia.com 6 00.0 KB 0 0 000:00:02
2167.94.138.190 3 00.0 KB 0 0 000:00:05
326.149.216.162.bc.googleusercontent.com 2 00.0 KB 0 0 000:00:08
44.210.203.35.bc.googleusercontent.com 2 00.0 KB 0 0 000:00:11
5athens.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
6c-5eea5ba9-74736162.cust.telenor.se 2 00.0 KB 0 0 000:00:01
7prague.scan.bufferover.run 2 00.0 KB 0 0 000:00:00
8seamus.probe.onyphe.net 2 00.0 KB 0 0 000:00:05
9198.235.24.82 1 00.0 KB 0 0 000:00:02
10205.210.31.23 1 00.0 KB 0 0 000:00:04
11222.210.203.35.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
1251.159.234.118 1 00.0 KB 0 0 000:00:00
1372.149.216.162.bc.googleusercontent.com 1 00.0 KB 0 0 000:00:00
14admired.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:00
15advisable.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:03
16approachable.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:00
17energetic.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:00
18hopper.probe.onyphe.net 1 00.0 KB 0 0 000:00:00
19limitless.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:03
20mesmerizing.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:00
21ray.probe.onyphe.net 1 00.0 KB 0 0 000:00:06
22streamlined.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:00
23stupendous.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:00
TOTAL: 23 36 00.0 KB 0 0 000:00:55

NNRP readership statistics (by domain):

SystemConnArtsSizeGroupsPostRejElapsed
1*.monitoring.internet-measurement.com 8 00.0 KB 0 0 000:00:06
2*.tbcn.telia.com 6 00.0 KB 0 0 000:00:02
3unresolved 6 00.0 KB 0 0 000:00:12
4*.probe.onyphe.net 4 00.0 KB 0 0 000:00:12
5*.scan.bufferover.run 4 00.0 KB 0 0 000:00:00
6*.149.216.162.bc.googleusercontent.com 3 00.0 KB 0 0 000:00:08
7*.210.203.35.bc.googleusercontent.com 3 00.0 KB 0 0 000:00:11
8*.cust.telenor.se 2 00.0 KB 0 0 000:00:01
TOTAL: 8 36 00.0 KB 0 0 000:00:55

NNRP auth users [Top 20]:

UserConn
peterlondon 8
TOTAL: 1 8

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
4.210.203.35.bc.googleusercontent.com 0.077 0.013 0.00000:00:11
26.149.216.162.bc.googleusercontent.com 0.082 0.009 0.00000:00:08
ray.probe.onyphe.net 0.007 0.006 0.00000:00:06
167.94.138.190 0.056 0.015 0.00000:00:05
seamus.probe.onyphe.net 0.013 0.012 0.00000:00:05
205.210.31.23 0.008 0.004 0.00000:00:04
limitless.monitoring.internet-measurement.com 0.036 0.008 0.00000:00:03
advisable.monitoring.internet-measurement.com 0.042 0.006 0.00000:00:03
198.235.24.82 0.006 0.008 0.00000:00:02
81-229-79-101-no600.tbcn.telia.com 0.061 0.030 0.17400:00:02
c-5eea5ba9-74736162.cust.telenor.se 0.014 0.017 0.06200:00:01
hopper.probe.onyphe.net 0.007 0.007 0.00000:00:00
72.149.216.162.bc.googleusercontent.com 0.039 0.005 0.00000:00:00
prague.scan.bufferover.run 0.015 0.007 0.00000:00:00
222.210.203.35.bc.googleusercontent.com 0.041 0.005 0.00000:00:00
athens.scan.bufferover.run 0.011 0.014 0.00000:00:00
51.159.234.118 0.038 0.005 0.00000:00:00
streamlined.monitoring.internet-measurement.com 0.039 0.005 0.00000:00:00
admired.monitoring.internet-measurement.com 0.046 0.005 0.00000:00:00
TOTAL: 19 0.638 0.181 0.23600:00:55

NNRP gethostbyaddr failures [Top 20]:

SystemConn
? (can't getpeername) 5
TOTAL: 1 5

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
prague.scan.bufferover.run 8
athens.scan.bufferover.run 7
222.210.203.35.bc.googleusercontent.com 4
26.149.216.162.bc.googleusercontent.com 4
4.210.203.35.bc.googleusercontent.com 4
72.149.216.162.bc.googleusercontent.com 4
hopper.probe.onyphe.net 2
seamus.probe.onyphe.net 2
167.94.138.190 1
TOTAL: 9 36

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
GET / HTTP/1.1 5
Host: 109.238.130.155:563 4
#001 3
Accept-Encoding: gzip 3
Accept: */* 3
#026#003#001#001 2
#026#003#003#001¨#001 2
User-Agent: Hello from Palo Alto Network... 2
User-Agent: curl/7.68.0 2
À#024 2
À$À(À#À' 2
À$À­À¯À,ÀrÀsÌ©#023#002#023#001Ì#024À#007À#022À#023À'À/À#024À(À0À`Àa... 2
#026#003#001 1
EHLO www.censys.io 1
Host: 109.238.130.155:119 1
User-Agent: Mozilla/5.0 (Macintosh; Inte... 1
TOTAL: 16 36

NNRP client timeouts [Top 20]:

SystemConnPeer
167.94.138.190 1 2
222.210.203.35.bc.googleusercontent.com 1 1
26.149.216.162.bc.googleusercontent.com 1 2
4.210.203.35.bc.googleusercontent.com 1 2
72.149.216.162.bc.googleusercontent.com 1 1
TOTAL: 5 5 11