spiceproxy bruteforce

v_k

New Member
Mar 31, 2024
6
0
1
Hello,

I am getting thousands of connections to spiceproxy which I believe are bruteforce attempts. I recommend to disable this service by default and start it only when user explicitly clicks on it in the Web GUI.


Code:
tcp6       1      0 1.2.3.4:3128     117.2.212.152:56078     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:55358     CLOSE_WAIT  920720/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:54029     CLOSE_WAIT  920707/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:54651     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:62248     CLOSE_WAIT  920707/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:64251     CLOSE_WAIT  920707/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:60433     CLOSE_WAIT  920723/spiceproxy w
tcp6       0      0 1.2.3.4:3128     117.2.212.152:64601     ESTABLISHED 920723/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:59843     CLOSE_WAIT  920707/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:63445     CLOSE_WAIT  920715/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:50833     CLOSE_WAIT  920716/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:63430     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:55476     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:54106     CLOSE_WAIT  920707/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:56864     CLOSE_WAIT  920716/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:52318     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:55117     CLOSE_WAIT  920707/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:58308     CLOSE_WAIT  920716/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:62034     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:65367     CLOSE_WAIT  920702/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:55860     CLOSE_WAIT  920707/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:53882     CLOSE_WAIT  920707/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:63311     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:53230     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:64273     CLOSE_WAIT  920715/spiceproxy w
tcp6       0      0 1.2.3.4:3128     117.2.212.152:49162     ESTABLISHED 920723/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:61546     CLOSE_WAIT  920716/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:51907     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:51957     CLOSE_WAIT  920707/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:59050     CLOSE_WAIT  920721/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:52154     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:57135     CLOSE_WAIT  920707/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:50282     CLOSE_WAIT  920716/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:62296     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:59711     CLOSE_WAIT  920720/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:57552     CLOSE_WAIT  920702/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:56204     CLOSE_WAIT  920705/spiceproxy w
tcp6       1      0 1.2.3.4:3128     117.2.212.152:55898     CLOSE_WAIT  920705/spiceproxy w

Code:
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[2] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/perl5/URI.pm line 79, <DATA> line 960.
Jul 22 21:37:52 proxmox spiceproxy[896496]: Attempt to reload URI/_foreign.pm aborted.
                                                        Compilation failed in require at /usr/share/pe

...
                                                        
Jul 22 21:37:52 proxmox spiceproxy[896490]: Unable to load access control list: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[1] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[2] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[3] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: Unable to load access control list: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[1] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[2] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[3] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: Unable to load access control list: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[1] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[2] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[3] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: Unable to load access control list: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[1] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[2] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[3] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: Unable to load access control list: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[1] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[2] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[3] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: Unable to load access control list: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[1] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[2] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[3] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: Unable to load access control list: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[1] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[2] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[3] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: Unable to load access control list: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[1] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[2] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[3] failed: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: Unable to load access control list: Too many open files
Jul 22 21:37:52 proxmox spiceproxy[896490]: ipcc_send_rec[1] failed: Too many open files