Targeting the source of excess DNS queries

[Telos]

Two days ago my daily DNS queries tripled on my Debian server. Every 2 seconds a request for pypi.org appears on my AdguardHome log. I ran NetHogs and obtained this snapshot:

Python3 seems the logical source, but I have no entries in my operational change log over the past week to suggest a source.

I welcome any suggestions to help me drill down to this nonsense.

 

[Telos]

This turned out to be a misbehaving nginx proxy manager container. Oddly, the container worked flawlessly, but kept throwing errors, that caused pip update checks to repeat. Updated the image, and all is now settled.

Even my Uptime Kuma monitor missed this, so I'll need to explore a bit more deeply. Thanks to Dozzle for helping me locate this.