Too much TIME_WAIT

[jazz1611]

Hi,

Today i get attacking DDoS and get

[email protected] [~]# netstat -an | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | sort -n| uniq -c | sort -n
8886 120.xx.xx.xxx
[email protected] [~]# netstat -tunap | grep TIME_WAIT | wc -l
5594
[email protected] [~]# netstat -tunap | grep -v TIME_WAIT | wc -l
735

How can i resolve it? Thank us if suggest for me

Regards,

 

[cPanelMichael]

Hello

Is that a remote IP address? If so, have you tried blocking that IP address in a firewall such as CSF?

Thank you.

 

[jazz1611]

Hello

Is that a remote IP address? If so, have you tried blocking that IP address in a firewall such as CSF?

Thank you.

8886 120.xx.xx.xxx - there is ip address of Server. Look at the picture /http://up9x.net/t

 

[cPanelMichael]

DDOS attacks can be difficult to mitigate with standard firewalls such as CSF. You may want to consult with your data center to see if they offer any mitigation services or if there is anything they can do to assist you.

Thank you.

 

[jazz1611]

Can you tell me now I'm having the case? I'm still not sure the current problem I am having is with DDoS? Thank you

 

[cPanelMichael]

Can you tell me now I'm having the case? I'm still not sure the current problem I am having is with DDoS? Thank you

It's difficult to say for sure without access to your system. I was advising you based on the first sentence in your initial message where you stated "Today i get attacking DDoS". You may want to consult with a qualified system administrator if you require assistance with this type of issue.

Thank you.

 

[jazz1611]

Hi,

You can check tickets ID# 4386461 (i request few day ago). This is problem i'm facing.

 

[cPanelMichael]

That ticket was related to your server load. The following thread is helpful for troubleshooting load issues:

Troubleshooting High Load on Linux Systems

Thank you.

 

[jazz1611]

Hi,

I am facing ddos attack by TIME_WAIT. How to block TIME_WAIT on csf?

Regards,

 

[cPanelMichael]

Questions about configuring CSF itself will likely get more results on their forums:

ConfigServer - Support Forums

Thank you.