I've seen a lot of questions with people concerned about lots of TIME_WAITs in netstat. I'm having a similar problem but all the TIME_WAITs are coming from the same IP address. I get over 200 of the following line:
tcp6 0 0 myip:80 otherip:##### TIME_WAIT
Is getting 200+ of these, all with the same IP for otherip, a bad sign of something? I have multiple sites running, but with low traffic. With all the sites combined, I get under 200 visits a day registered through Google Analytics. I'm using Apache as a server. I've had this problem at other times as well, originating from different IP addresses. When this happens, I check netstat in response to monitoring checks that I have set up with Rackspace. These usually include warnings or critical errors for server load and memory, and sometimes for long response times from my server.
There have also been several times where MySQL would stop working when this happens. I have 1 GB of RAM plus 1 GB of swap space.
Edit: I did a bit more searching and looked through my Apache log files. I'm pretty worried now because there were tons of POST accesses to wp-login.php for Wordpress (almost 4000 of them), so I'm guessing someones trying to hack a password. Apart from changing the password, is there anything else I can do about this?