Daily Usenet Report

Sep 9 00:01:01 -- Sep 10 00:01:01

Unknown entries from news log file:

First 3 / 3 lines (100.0%)

Sep 9 03:03:06 newsfeed nnrpd[64659]: 47.186.47.228 auth: program exited with status 8
Sep 9 08:10:39 newsfeed innd: message repeated 2 times: [ ctlinnd command s]
Sep 10 00:00:01 newsfeed nnrpd[540910]: localhost auth: program exited with status 8

Log entries by program:

Program nameLines%LinesSize%Size
inn 9386 30.7%3.9 MB 57.8%
nnrpd 8400 27.5%871.6 KB 12.5%
innd 8125 26.6%1.2 MB 17.3%
innfeed 4090 13.4%791.9 KB 11.4%
cnfsstat 432 1.4%63.1 KB 0.9%
nocem 90 0.3%10.3 KB 0.1%
controlchan 1 0.0%0.1 KB 0.0%
TOTAL: 7 30524 100.0%6.8 MB100.0%

History cache:

ReasonCount%Count
Positive hits 129062 60.2%
Negative hits 75925 35.4%
Do not exist 9225 4.3%
Cache misses 6 0.0%
TOTAL: 4 214218 100.0%

INND timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article cancel00:00:00.121 0.0%41 0.000 2.951 12.000
article cleanup00:00:00.108 0.0%9302 0.000 0.012 0.079
article logging00:00:00.455 0.0%9372 0.000 0.049 0.429
article parse00:00:00.282 0.0%15907 0.000 0.018 0.125
article write00:00:02.534 0.0%8109 0.000 0.312 9.111
artlog/artcncl00:00:00.000 0.0%9 0.000 0.000 0.000
artlog/artparse00:00:00.000 0.0%2 0.000 0.000 0.000
data move00:00:00.914 0.0%219250 0.000 0.004 0.157
hisgrep/artcncl00:00:00.103 0.0%44 0.000 2.341 10.000
hishave/artcncl00:00:00.000 0.0%9 0.000 0.000 0.000
history grep00:00:00.000 0.0%0 0.000 0.000 0.000
history lookup00:02:47.327 0.2%215772 0.102 0.775 4.793
history sync00:00:00.084 0.0%402 0.000 0.209 1.667
history write00:02:07.230 0.1%9287 3.314 13.700 113.243
hiswrite/artcncl00:00:00.000 0.0%0 0.000 0.000 0.000
idle23:44:25.020 98.6%217469 87.659 392.999 1592.430
nntp read00:00:07.135 0.0%219363 0.004 0.033 1.210
overview write00:14:06.306 1.0%8109 0.431 104.366 14120.375
perl filter00:00:32.831 0.0%9285 1.439 3.536 22.515
python filter00:00:01.482 0.0%9285 0.000 0.160 5.593
site send00:00:01.342 0.0%16302 0.000 0.082 0.306
TOTAL: 24:05:07.21524:04:13.274 99.9%----

INNfeed timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
article new00:00:00.024 0.0%8354 0.000 0.003 0.071
article prepare00:00:00.008 0.0%56392 0.000 0.000 0.005
article read00:00:00.556 0.0%3791 0.000 0.147 0.600
backlog stats00:00:00.385 0.0%299412 0.000 0.001 0.006
callbacks00:00:00.000 0.0%0 0.000 0.000 0.000
data read00:00:02.695 0.0%206895 0.000 0.013 0.045
data write00:00:03.748 0.0%202040 0.007 0.019 0.038
idle23:57:38.509100.0%299412 131.266 288.093 1310.253
status file00:00:00.289 0.0%258 0.750 1.120 5.000
TOTAL: 23:57:59.23723:57:46.214100.0%----

nnrpd timer:

Code regionTimePctInvokedMin(ms)Avg(ms)Max(ms)
idle13:40:03.574 97.7%9101 0.000 5406.392900023.500
newnews00:00:00.000 0.0%0 0.000 0.000 0.000
nntpwrite00:00:04.824 0.0%97146 0.000 0.050 0.333
readart00:00:00.135 0.0%184 0.734 0.734 0.734
TOTAL: 13:59:10.20413:40:08.533 97.7%----

Control commands to INND:

CommandNumber
flush 5
flushlogs 2
go 2
logmode 2
lowmark 1
mode 98
name 2
pause 2
paused 2
reload 2
reserve 2
TOTAL: 11 120

Incoming Feeds (INN):

ServerConnectsOfferedTakenRefusedReject%AccptElapsed
1endofthelinebbs-out.news.weretis.net 4 14228 2050 11853 325 14%47:23:13
2outgoing.news.lysator.liu.se 1 6805 1841 4904 60 27%23:59:56
3usenet.blueworldhosting.com 719 9063 1068 7487 508 11%23:57:29
4news.hispagatos.org 6 8037 498 7465 74 6%24:25:33
5usenet.network 1 6172 460 5708 4 7%23:59:55
6nntp.comgw.net 1 8195 383 7699 113 4%23:59:57
7news.corradoroberto.it 7 1511 366 1145 0 24%22:48:11
8endoftheline-out.news.chmurka.net 1 3965 276 3687 2 6%23:59:57
9i2pn.org 2 8141 247 7873 21 3%23:59:49
10usenet.goja.nl.eu.org 11 8129 160 7960 9 1%23:58:42
11endofthelinebbs.peers.news.panix.com 26 8462 159 8286 17 1%23:55:23
12newsfeed.bofh.team 1 8961 132 8819 10 1%23:59:56
13newsfeed.xs3.de 1 6554 111 6438 5 1%23:59:57
14news.samoylyk.net 2 6993 107 6884 2 1%23:59:11
15news.nntp4.net 2 6851 91 6757 3 1%23:59:12
16news.netfront.net 2 7373 22 7294 57 0%27:58:29
17glockenspiel.complete.org 2 5478 9 5468 1 0%23:59:33
18news.bbs.nz 2 6114 5 6108 1 0%23:59:25
19photonic.trudheim.com 1 1567 4 1562 1 0%17:46:32
20news.furie.org.uk 2 4206 3 4201 2 0%23:59:14
21eotl-out.news.tnetconsulting.net 1 0 0 0 0 0%00:10:13
22localhost 29 0 0 0 0 0%00:00:00
23news.nk.ca 2 0 0 0 0 0%00:20:12
TOTAL: 23 826 136805 7992 127598 1215 5%500:39:59
Articles received by server

Incoming Volume (INN):

ServerAcceptVolDupVolRejVolTotalVol%AccVol/Art
1newsfeed.bofh.team8.7 MB1.9 KB12.3 KB8.7 MB 99%62.7 KB
2endofthelinebbs-out.news.weretis.net6.4 MB3.8 KB657.9 KB7.0 MB 90%3.0 KB
3outgoing.news.lysator.liu.se5.2 MB1.9 KB75.3 KB5.3 MB 98%2.8 KB
4usenet.network4.7 MB1.9 KB2.8 KB4.7 MB 99%10.4 KB
5usenet.blueworldhosting.com3.0 MB0.0 KB1.2 MB4.1 MB 71%2.7 KB
6nntp.comgw.net2.3 MB1.9 KB625.6 KB2.9 MB 78%5.9 KB
7news.corradoroberto.it1.9 MB0.0 KB0.0 KB1.9 MB100%5.4 KB
8news.hispagatos.org1.8 MB1.9 KB102.9 KB1.9 MB 94%3.4 KB
9endoftheline-out.news.chmurka.net1021.1 KB0.0 KB1.3 KB1022.4 KB 99%3.7 KB
10i2pn.org864.0 KB1.9 KB29.0 KB894.9 KB 96%3.3 KB
11usenet.goja.nl.eu.org492.8 KB1.9 KB21.4 KB516.2 KB 95%3.1 KB
12news.samoylyk.net473.6 KB0.0 KB1.9 KB475.5 KB 99%4.4 KB
13newsfeed.xs3.de464.2 KB1.9 KB4.3 KB470.4 KB 98%4.1 KB
14endofthelinebbs.peers.news.panix.com443.8 KB1.9 KB43.0 KB488.6 KB 90%2.8 KB
15news.nntp4.net242.0 KB1.9 KB1.4 KB245.4 KB 98%2.6 KB
16news.netfront.net57.8 KB1.9 KB503.4 KB563.1 KB 10%7.1 KB
17glockenspiel.complete.org44.5 KB1.9 KB0.0 KB46.4 KB 95%4.6 KB
18photonic.trudheim.com33.3 KB1.9 KB0.0 KB35.2 KB 94%7.0 KB
19news.furie.org.uk16.2 KB1.9 KB0.8 KB19.0 KB 85%3.8 KB
20news.bbs.nz11.5 KB1.9 KB0.0 KB13.3 KB 85%2.2 KB
21eotl-out.news.tnetconsulting.net0.0 KB0.0 KB0.0 KB0.0 KB 0%0
22localhost0.0 KB0.0 KB0.0 KB0.0 KB 0%0
23news.nk.ca0.0 KB0.0 KB0.0 KB0.0 KB 0%0
TOTAL: 2338.0 MB32.3 KB3.2 MB41.2 MB 92%4.6 KB
Incoming Volume received by server

Incoming articles:

DateArticles%ArtsArt/secSize%SizeKB/sec
Sep 9 00:01:01 - 00:59:59 153 1.9% 0.04499.1 KB 1.3% 0.14
Sep 9 01:00:00 - 01:59:59 277 3.4% 0.08828.9 KB 2.1% 0.23
Sep 9 02:00:00 - 02:59:59 389 4.8% 0.111.2 MB 3.1% 0.35
Sep 9 03:00:00 - 03:59:59 386 4.8% 0.111.4 MB 3.6% 0.40
Sep 9 04:00:00 - 04:59:59 438 5.4% 0.121.3 MB 3.3% 0.36
Sep 9 05:00:00 - 05:59:59 377 4.6% 0.101.3 MB 3.2% 0.36
Sep 9 06:00:00 - 06:59:59 341 4.2% 0.091.0 MB 2.6% 0.29
Sep 9 07:00:00 - 07:59:59 395 4.9% 0.111.2 MB 3.1% 0.34
Sep 9 08:00:00 - 08:59:59 475 5.9% 0.131.6 MB 4.1% 0.45
Sep 9 09:00:00 - 09:59:59 463 5.7% 0.131.4 MB 3.7% 0.41
Sep 9 10:00:00 - 10:59:59 510 6.3% 0.142.3 MB 5.9% 0.65
Sep 9 11:00:00 - 11:59:59 459 5.7% 0.131.6 MB 4.2% 0.46
Sep 9 12:00:00 - 12:59:59 486 6.0% 0.142.1 MB 5.3% 0.59
Sep 9 13:00:00 - 13:59:59 385 4.7% 0.111.8 MB 4.7% 0.52
Sep 9 14:00:00 - 14:59:59 426 5.3% 0.121.8 MB 4.5% 0.50
Sep 9 15:00:00 - 15:59:59 447 5.5% 0.123.0 MB 7.6% 0.84
Sep 9 16:00:00 - 16:59:59 346 4.3% 0.101.1 MB 2.7% 0.30
Sep 9 17:00:00 - 17:59:59 318 3.9% 0.098.7 MB 22.4% 2.49
Sep 9 18:00:00 - 18:59:59 215 2.7% 0.06953.1 KB 2.4% 0.26
Sep 9 19:00:00 - 19:59:59 177 2.2% 0.05782.7 KB 2.0% 0.22
Sep 9 20:00:00 - 20:59:59 110 1.4% 0.03356.9 KB 0.9% 0.10
Sep 9 21:00:00 - 21:59:59 161 2.0% 0.041.4 MB 3.6% 0.40
Sep 9 22:00:00 - 22:59:59 133 1.6% 0.04611.0 KB 1.5% 0.17
Sep 9 23:00:00 - 23:59:59 236 2.9% 0.07869.1 KB 2.2% 0.24
Sep 10 00:00:00 - 00:01:01 9 0.1% 0.1520.3 KB 0.1% 0.33
TOTAL: 24:00:00 8112 100.0% 0.0939.0 MB 100.0% 0.46
Incoming articles
Incoming articles (size)

CNFS buffer status:

BufferClassSizeUsed%UsedCyclesKB/secDays
CYCNGS1NGS1536.0 GB48.0 MB 0.0% 1 0.00 0.00
CYCNGS2NGS1536.0 GB97.2 GB 6.3% 0 0.5533844.15
CYCTXT1TEXT5.0 GB3.9 GB 77.1% 0 0.25 241.68
TOTAL: 3-3077.0 GB101.1 GB 3.3% 1 0.46-

Sites sending bad articles:

ServerTotalGroupDistDuplicUnappTooOldSiteLineOther
1usenet.blueworldhosting.com 531 1 0 0 0 0 0 0 530
2endofthelinebbs-out.news.weretis.net 363 0 0 2 0 0 0 0 361
3nntp.comgw.net 98 0 0 1 0 0 0 0 97
4news.hispagatos.org 68 24 0 1 0 0 0 0 43
5outgoing.news.lysator.liu.se 60 0 0 1 0 0 0 0 59
6news.netfront.net 58 0 0 1 0 0 0 0 57
7endofthelinebbs.peers.news.panix.com 22 0 0 1 0 0 0 0 21
8i2pn.org 20 0 0 1 0 0 0 0 19
9usenet.goja.nl.eu.org 11 0 0 1 0 0 0 0 10
10newsfeed.bofh.team 10 0 0 1 0 0 0 0 9
11newsfeed.xs3.de 5 0 0 1 0 0 0 0 4
12usenet.network 4 0 0 1 0 0 0 0 3
13news.nntp4.net 3 0 0 1 0 0 0 0 2
14news.samoylyk.net 3 0 0 0 0 0 0 0 3
15endoftheline-out.news.chmurka.net 2 0 0 0 0 0 0 0 2
16glockenspiel.complete.org 2 0 0 1 0 0 0 0 1
17news.furie.org.uk 2 0 0 1 0 0 0 0 1
18news.bbs.nz 1 0 0 1 0 0 0 0 0
19news.corradoroberto.it 1 0 0 0 0 0 0 0 1
20photonic.trudheim.com 1 0 0 1 0 0 0 0 0
TOTAL: 20 1265 25 0 17 0 0 0 0 1223

Unwanted newsgroups [Top 20]:

NewsgroupCount
hispagatos.hacking.ctf 16
hispagatos.hacking.news 7
hispagatos.hacking.exploits 1
soc.culture.russia 1
TOTAL: 4 25

INND Perl filter [Top 20]:

ReasonCount
EMP (phn path) 518
EMP (phr path) 335
Too many newsgroups 125
EMP (md5) 101
User-issued cancel 45
Too many newsgroups (meow) 20
HTML Multipart 5
Binary: misplaced binary 1
TOTAL: 8 1150

NoCeM on Spool:

Issuer (type)NoticesBad PGPCancelSkipTotal
i2pn2-nocem@i2pn2.org (spam)50606
i2pn2-nocem@i2pn2.org (rmp)3400171171
i2pn2-nocem@i2pn2.org (multipost)3600125125
robot@pasdenom.info (spam3)2001616
nocem@usenet.ovh (faqfr)50055
robot@pasdenom.info (spam2)20044
TOTAL: 68406321327

Miscellaneous innd statistics [Top 10]:

EventServerNumber
Including strange strings
endofthelinebbs-out.news.weretis.net 35
usenet.blueworldhosting.com 23
endofthelinebbs.peers.news.panix.com 5
usenet.goja.nl.eu.org 2
nntp.comgw.net 2
usenet.network 1
news.samoylyk.net 1
news.corradoroberto.it 1
news.netfront.net 1
TOTAL: 9 71
No colon-space in header field
usenet.blueworldhosting.com 2
TOTAL: 1 2
TOTAL: 2 73

Outgoing Feeds (innfeed) by Articles:

ServerOfferedTakenRefusedRejectMissSpool%TookElapsed
1news.netfront.net 13093 2198 5892 0 0 7 16%23:59:39
2nyheter.lysator.liu.se 6470 1548 4125 597 0 0 23%23:59:47
3photonic.trudheim.com 8596 696 6261 1130 0 0 8%23:59:50
4news.furie.org.uk 4968 661 3284 2 0 0 13%23:59:51
5endofthelinebbs.peers.news.panix.com 8378 560 7530 8 0 0 6%23:59:51
6news.hispagatos.org 8952 455 6846 246 0 2 5%23:59:51
7usenet.network 8221 419 6548 32 0 2 5%23:59:51
8news.bbs.nz 14480 356 7059 685 0 86 2%23:59:29
9usenet.goja.nl.eu.org 9209 332 7318 267 0 0 3%23:59:51
10news.nk.ca 12392 289 6975 752 0 56 2%23:59:51
11newsfeed.bofh.team 9276 266 7644 0 0 4 2%23:59:51
12news.nntp4.net 9379 138 7810 45 0 2 1%23:59:51
13news.tnetconsulting.net 8985 130 7675 292 0 6 1%23:59:51
14i2pn.org 9297 120 7653 54 0 59 1%23:59:44
15news.weretis.net 8338 116 7794 201 0 0 1%23:58:39
16nntp.comgw.net 9012 107 7480 144 0 3 1%23:59:42
17news.quux.org 8612 106 7334 657 0 0 1%23:59:51
18news.corradoroberto.it 1176 71 945 7 0 0 6%23:13:16
19news.chmurka.net 4374 65 3538 0 0 5 1%23:59:51
20newsfeed.xs3.de 9636 61 7714 210 0 4 0%23:59:51
21news.samoylyk.net 9634 32 7903 49 0 15 0%23:59:36
22usenet.blueworldhosting.com 7018 1 6672 0 0 2 0%23:59:27
23feed.opticnetworks.net 0 0 0 0 0 8112 0%23:59:51
TOTAL: 23 189496 8727 142000 5378 0 8365 4%551:07:12
Outgoing feeds (innfeed) by Articles

Outgoing Feeds (innfeed) by Volume:

ServerAcceptVolRejectVolTotalVolVolume/secVol/ArtElapsed
1news.netfront.net20.6 MB0.0 KB20.6 MB0.2 KB/s9.6 KB23:59:39
2news.nk.ca9.3 MB5.5 MB14.8 MB0.2 KB/s14.6 KB23:59:51
3nyheter.lysator.liu.se5.3 MB6.1 MB11.4 MB0.1 KB/s5.4 KB23:59:47
4news.furie.org.uk4.8 MB10.4 KB4.8 MB0.1 KB/s7.4 KB23:59:51
5photonic.trudheim.com4.7 MB3.9 MB8.6 MB0.1 KB/s4.8 KB23:59:50
6endofthelinebbs.peers.news.panix.com2.9 MB16.8 KB3.0 MB0.0 KB/s5.3 KB23:59:51
7news.quux.org2.6 MB4.7 MB7.4 MB0.1 KB/s9.9 KB23:59:51
8newsfeed.bofh.team2.0 MB0.0 KB2.0 MB0.0 KB/s7.8 KB23:59:51
9news.hispagatos.org1.7 MB2.2 MB3.8 MB0.0 KB/s5.6 KB23:59:51
10usenet.network1.5 MB73.8 KB1.6 MB0.0 KB/s3.5 KB23:59:51
11news.bbs.nz1.1 MB12.3 MB13.4 MB0.2 KB/s13.2 KB23:59:29
12usenet.goja.nl.eu.org747.0 KB2.7 MB3.5 MB0.0 KB/s5.9 KB23:59:51
13news.tnetconsulting.net656.2 KB2.2 MB2.9 MB0.0 KB/s7.0 KB23:59:51
14news.nntp4.net616.8 KB736.4 KB1.3 MB0.0 KB/s7.4 KB23:59:51
15news.weretis.net541.9 KB11.1 MB11.6 MB0.1 KB/s37.4 KB23:58:39
16i2pn.org367.7 KB331.6 KB699.4 KB0.0 KB/s4.0 KB23:59:44
17news.corradoroberto.it329.4 KB16.9 KB346.4 KB0.0 KB/s4.4 KB23:13:16
18nntp.comgw.net322.9 KB1.5 MB1.8 MB0.0 KB/s7.4 KB23:59:42
19news.samoylyk.net288.2 KB91.3 KB379.5 KB0.0 KB/s4.7 KB23:59:36
20news.chmurka.net256.0 KB0.0 KB256.0 KB0.0 KB/s3.9 KB23:59:51
21newsfeed.xs3.de246.2 KB1.9 MB2.1 MB0.0 KB/s7.9 KB23:59:51
22usenet.blueworldhosting.com2.5 KB0.0 KB2.5 KB0.0 KB/s2.5 KB23:59:27
23feed.opticnetworks.net0.0 KB0.0 KB0.0 KB0.0 KB/s023:59:51
TOTAL: 2360.9 MB55.3 MB116.2 MB0.1 KB/s8.4 KB551:07:12
Outgoing feeds (innfeed) by Volume

NNRP readership statistics:

SystemConnArtsSizeGroupsPostRejElapsed
147.186.47.228 1 11.5 KB 1 0 012:39:36
TOTAL: 1 1 11.5 KB 1 0 013:59:08

NNRP readership statistics (by domain):

SystemConnArtsSizeGroupsPostRejElapsed
1unresolved 15 11.5 KB 1 0 013:17:39
2*.demos.su2743 00.0 KB 0 0 000:30:07
3*.census.shodan.io 2 00.0 KB 0 0 000:00:01
4*.ausics.net 1 00.0 KB 0 0 000:00:01
5*.monitoring.internet-measurement.com 1 00.0 KB 0 0 000:00:02
6? 1 00.0 KB 0 0 000:11:15
TOTAL: 62763 11.5 KB 1 0 013:59:08

NNRP auth users [Top 20]:

UserConn
getlist 1
nelgin 1
TOTAL: 2 2

NNRP total resource statistics [Top 20]:

SystemUser(ms)System(ms)Idle(ms)Elapsed
47.186.47.228 0.047 0.116 0.25212:39:36
69.10.48.174 0.008 0.026 0.00000:37:29
ddt.demos.su 9.450 37.566 0.00000:30:07
localhost 180.511 367.584 0.07400:11:15
198.235.24.14 0.000 0.016 0.00000:00:10
167.94.138.46 0.034 0.035 0.00000:00:08
167.94.138.122 0.014 0.048 0.00000:00:06
198.235.24.204 0.007 0.010 0.00000:00:04
167.94.146.52 0.022 0.039 0.00000:00:03
keen.monitoring.internet-measurement.com 0.000 0.017 0.00000:00:02
valhalla.ausics.net 0.000 0.017 0.00000:00:01
cloud.census.shodan.io 0.007 0.010 0.00000:00:00
green.census.shodan.io 0.004 0.012 0.00000:00:00
80.66.76.130 0.004 0.012 0.00000:00:00
TOTAL: 14 190.108 405.508 0.32613:59:08

Curious NNRP server explorers [Top 20]:

SystemConn
ddt.demos.su 2743
167.94.138.122 3
167.94.138.46 3
167.94.146.52 3
69.10.48.174 2
198.235.24.14 1
198.235.24.204 1
80.66.76.130 1
cloud.census.shodan.io 1
green.census.shodan.io 1
keen.monitoring.internet-measurement.com 1
localhost 1
valhalla.ausics.net 1
TOTAL: 13 2762

NNRP unrecognized commands (by host) [Top 20]:

SystemConn
167.94.138.122 1
167.94.138.46 1
167.94.146.52 1
80.66.76.130 1
TOTAL: 4 4

NNRP unrecognized commands (by command) [Top 20]:

CommandCount
EHLO www.censys.io 3
#003 1
TOTAL: 2 4

NNRP client timeouts [Top 20]:

SystemConnPeer
167.94.138.122 1 2
167.94.138.46 1 2
167.94.146.52 1 2
69.10.48.174 1 0
80.66.76.130 1 1
TOTAL: 5 5 8

Newsgroup request counts (by hierarchy):

HierarchyCountPct
1news 1100.0%
TOTAL: 1 1100.0%

Newsgroup request counts (by newsgroup) [Top 100]:

NewsgroupCount
1news.admin.net-abuse.usenet 1
TOTAL: 1 1