Why so many connections?

Question

CentOS

Hello.
Since 8 am we have been seeing an unhealthy picture.
There is a dedicated server, since 8 in the morning it has hellish traffic on the port, everything is busy. Full loading processes. The site in 502 is gone (the whole server is under 1 site)
According to the netstat, you can see that
netstat -n -p | awk '{print $6}'|awk -F: '{print $1}' | sort -n | uniq -c | sort-nr | head -n10
48562 ESTABLISHED
9512 TIME_WAIT
8757 SYN_SENT
532 SYN_RECV
314 CONNECTED
197 FIN_WAIT1
58 FIN_WAIT2
8 LAST_ACK
3 CLOSING
2 CLOSE_WAIT
netstat -n -p | awk '{print $5}'|awk -F: '{print $1}' | sort -n | uniq -c | sort-nr | head -n10
28189 127.0.0.1
sudo netstat -nput | awk '{print $4}'|awk -F: '{print $2}' | sort -n | uniq -c | sort-nr | head -n10
52914 443
495 8888
76 11211
59 80
10
8 21
3 22
2 60998
2 60980
2 60968
Where does this come from and what could be the reason?

Answer 1

Judging by what you threw off, this happens because of the moon in the unicorn phase.
Here it is quite clear that you have 53k connections on port 443, so figure out who it is and why so many are connected.
Maybe this is how it should be, it’s just that your server can no longer cope with the load and it’s time to increase capacity, or maybe competitors are pressing you. Who knows

Answer 2

If web, then maybe ddos. Anything.