From Newsgroup: news.admin.peering

Hello admins,

I've noticed that a lot more SPAM gets stuck in the filter lately and legitimate traffic has decreased relatively sharply in the last 6 - 8
months.

And I'm thinking about which newsgroups still really make sense at the
moment and which can definitely be called old dead.

What about your servers in terms of newsgroups and users?

Thanks,
Timo
--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: news.admin.peering

Timo <hostmaster@nnt4.net> wrote:

Hello admins,

I've noticed that a lot more SPAM gets stuck in the filter lately and >legitimate traffic has decreased relatively sharply in the last 6 - 8 >months.

And I'm thinking about which newsgroups still really make sense at the >moment and which can definitely be called old dead.

What about your servers in terms of newsgroups and users?

How exactly would that affect implementng a spam countermeasure, given
that off-topic crap certainly does appear in newsgroups with on topic discussion.
--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: news.admin.peering

On 20.01.2026 06:27 Uhr Timo wrote:

And I'm thinking about which newsgroups still really make sense at
the moment and which can definitely be called old dead.

Which hierarchies are affected and where is the spam being injected?
--
kind regards
Marco

Send spam to 1768886829muell@stinkedores.dorfdsl.de

--- Synchronet 3.21a-Linux NewsLink 1.2

From Newsgroup: news.admin.peering

Timo <admin@nntp4.invalid> wrote:

What about your servers in terms of newsgroups and users?

My server is focused on pl.* and alt.pl.* and I have some daily stats
(post count per group in these two hierarchies in the last 24 hours).

http://news.chmurka.net/#StatystykiTop15PL

A few pl.* groups are still active. The rest, including majority of
alt.pl.* groups, is more or less dead. But there's no spam there since
Google depeered itself (but, for example, all traffic on alt.pl.misc.samochody.gielda is automated, but I wouldn't necessarily
count it as spam -- it's a group for selling cars and someone just set up
some bot to post ads there).

When it comes to posters to pl.* and alt.pl.* and servers:

http://news.chmurka.net/#StatystykiTop15Serwerow

It counts unique Froms in the last 24 hours, per posting server. Seems my server contributes a major traffic (which is still only 20 unique Froms in
the last 24 hours).

If you're interested in archived stats in a more machine-friendly format (warning: large JSON): http://news.chmurka.net/stats.php?json=all

When it comes to unique users -- I don't have stats for those who don't
have an account and only read anonymously (you need an account to post,
but you can read without one), but from those who do have an account:

- 397 registered users in total
- 165 never logged in (at least since 2023)
- 126 logged in at least once in 2026

By "logged in" I count successful login to nnrpd (authinfo).

The rest logged in last in 2025 or earlier (I run user stats since 2023).
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: news.admin.peering

Am 20.01.2026 um 17:41 schrieb Marco Moock:

On 20.01.2026 06:27 Uhr Timo wrote:

And I'm thinking about which newsgroups still really make sense at
the moment and which can definitely be called old dead.

Which hierarchies are affected and where is the spam being injected?

At first, I couldnrCOt see which host this was coming from, because the
log files of my filters only stated that something had been discarded.

Since around August 4, 2025, the newsgroups rCLrocksolid.shared.testrCY and rCLalt.testrCY have been flooded with automated test postings. It started
with isolated messages from:

srl.newsdeef.eu!reader-nyc.newsdeef.eu!.POSTED!not-for-mail

Currently, there are 9 test postings at intervals of 5 minutes from the following hosts:

srl.newsdeef.eu!news-ams.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-lon.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-tyo.pugleaf.net!.POSTED!not-for-mail srv.newsdeef.eu!news-sfo.pugleaf.net!.POSTED!not-for-mail srv.newsdeef.eu!news-lax.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-can.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-sin.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-wdc.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-fra.pugleaf.net!.POSTED!not-for-mail
--
Timo
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: news.admin.peering

On 03.02.2026 17:55 Uhr Timo wrote:

Since around August 4, 2025, the newsgroups rCLrocksolid.shared.testrCY
and rCLalt.testrCY have been flooded with automated test postings. It
started with isolated messages from:

srl.newsdeef.eu!reader-nyc.newsdeef.eu!.POSTED!not-for-mail

Currently, there are 9 test postings at intervals of 5 minutes from
the following hosts:

srl.newsdeef.eu!news-ams.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-lon.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-tyo.pugleaf.net!.POSTED!not-for-mail srv.newsdeef.eu!news-sfo.pugleaf.net!.POSTED!not-for-mail srv.newsdeef.eu!news-lax.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-can.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-sin.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-wdc.pugleaf.net!.POSTED!not-for-mail srl.newsdeef.eu!news-fra.pugleaf.net!.POSTED!not-for-mail

Ok, that doesn't look like real spam, but broken stuff at this site.
As the operator is currently unreachable, I assume this will stay for a
while.
--
kind regards
Marco
Send spam to 1770137756muell@stinkedores.dorfdsl.de
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: news.admin.peering

Hi,

Timo a tapot|- :

Since around August 4, 2025, the newsgroups rCLrocksolid.shared.testrCY and rCLalt.testrCY have been flooded with automated test postings. It started with isolated messages from:

To begin, with cleanfeed, you can mark rocksolid.shared.test as "poison_groups".
--
St|-phane
Sorry for my bad english
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: news.admin.peering

On 03.02.2026 23:16 Uhr Timo wrote:

I have added the hosts newsdeef.eu and pugleaf.net to bad_hosts, as I
found additional newsgroups in which similar automated articles were
posted (though not in the large volume seen in rocksolid.shared.test).

At least some people are/were using this service for non-spam messages,
so be aware you might block too much.
--
kind regards
Marco

Send spam to 1770156980muell@stinkedores.dorfdsl.de

--- Synchronet 3.21b-Linux NewsLink 1.2