812 TIME_WAIT Connections

I have 812 TIME_WAIT connections and as you can imagine the server is stressing.

I have KeepAlive turned off and syn cookies , spoof protection etc... turned on. I have APF and anti-dos running (now every minute) with low threshold yet they keep on coming.

Okay I know how to get a list of the IPs, but how I can sort that list based on how many connection each ones is making, then I attempt to manually block them.

 

 

 

 

Top