Too much TIME_WAIT

jazz1611

• November 06, 2013 08:59

Hi, Today i get attacking DDoS and get root@servxxx [~]# netstat -an | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | sort -n| uniq -c | sort -n 8886 120.xx.xx.xxx root@servxxx [~]# netstat -tunap | grep TIME_WAIT | wc -l 5594 root@servxxx [~]# netstat -tunap | grep -v TIME_WAIT | wc -l 735
How can i resolve it? Thank us if suggest for me :) Regards,

• 

  cPanelMichael

  • November 06, 2013 17:25

  Hello :) Is that a remote IP address? If so, have you tried blocking that IP address in a firewall such as CSF? Thank you.

  0
• 

  jazz1611

  • November 06, 2013 17:40

  [quote="cPanelMichael, post: 1499232">Hello :) Is that a remote IP address? If so, have you tried blocking that IP address in a firewall such as CSF? Thank you.
  8886 120.xx.xx.xxx - there is ip address of Server. Look at the picture /http://up9x.net/t

  0
• 

  cPanelMichael

  • November 06, 2013 17:45

  DDOS attacks can be difficult to mitigate with standard firewalls such as CSF. You may want to consult with your data center to see if they offer any mitigation services or if there is anything they can do to assist you. Thank you.

  0
• 

  jazz1611

  • November 06, 2013 18:07

  Can you tell me now I'm having the case? I'm still not sure the current problem I am having is with DDoS? Thank you

  0
• 

  cPanelMichael

  • November 06, 2013 18:11

  [quote="jazz1611, post: 1499362">Can you tell me now I'm having the case? I'm still not sure the current problem I am having is with DDoS? Thank you
  It's difficult to say for sure without access to your system. I was advising you based on the first sentence in your initial message where you stated "Today i get attacking DDoS". You may want to consult with a qualified system administrator if you require assistance with this type of issue. Thank you.

  0
• 

  jazz1611

  • November 06, 2013 18:33

  Hi, You can check tickets ID# 4386461 (i request few day ago). This is problem i'm facing.

  0
• 

  cPanelMichael

  • November 06, 2013 19:23

  That ticket was related to your server load. The following thread is helpful for troubleshooting load issues: Troubleshooting High Load on Linux Systems Thank you.

  0
• 

  jazz1611

  • November 08, 2013 03:43

  Hi, I am facing ddos attack by TIME_WAIT. How to block TIME_WAIT on csf? Regards,

  0
• 

  cPanelMichael

  • November 08, 2013 17:21

  Questions about configuring CSF itself will likely get more results on their forums: ConfigServer - Support Forums Thank you.

  0

Please sign in to leave a comment.