Proxmox creating 1000s of connections and uploading data

[Elmar Stander]

Hi Guys

I started having issues with my internet a couple of months ago, first we thought it was a faulty DSL line till we ordered a new one that did exactly the same. My next move was to switch over to a Wifi network at a local isp. It ran fine for a while and the same thing started to happen. It turned out the IP of the proxmox was making 1000s of connections that was causing this. I don't even know where to begin, I am the biggest noob out there when it comes to Linux. Could this be a possible virus or just maybe a faulty nic?

 

[wolfgang]

Hi,

it locks like some software tries to connect an do not close.
Do you know this 2 IP?
I assume the dest IP is the PVE?
Have a lock what program listen to this port

netstat -ltp

 

[Elmar Stander]

hi Wolfgang,

to be honest I don't know if its the PVE IP, I have to sit in front of it to double check unless there is a command or a place I can see in the GUI interface, I ran Netstat here are the results

 

[Elmar Stander]

just checked in my etc\host this is not my IP

 

[Elmar Stander]

this is what I pick up on that IP

 

[dcsapak]

you should find out which device on your network has the ip 10.8.0.252

 

[Elmar Stander]

sorry src 10.8.0.252 is my Proxmox server dst 117.23.50.110 I don't know

 

[dcsapak]

you can use netstat or ss to find out what application makes the connection

e.g.

netstat -tp

edit: added example

 

[Elmar Stander]

Hi Netstat -tp and netstat -ltp attached