Today, after migrating a VPS, I found that the original VPS actually has a large number of syn_sent connections to the new VPS 80 port.
Initially thought is the original VPS has the configuration file link information written is the domain name reason (because domain name resolution has been changed to the new VPS IP, and some of the area DNS did not refresh), but the use of the following command to check after the discovery is not the case.
Netstat-atnp
Parameter p can see PID and program name, as long as the service port on the machine is open, there will be PID and program name. After the inspection found that the wget program in the Occupy, suddenly thought is the deployment of their own a timed check script, used to check whether the site is normal.
The solution is simple, as long as the planning task of the Bash program is stopped. If it is another abnormal program, just use KILL command to kill the PID, if it is a lot of processes, such as all wget programs, then only need to perform pkill-9 wget.