topic Re: DDOS attack in Community and Online Support Services

DDOS attack

bdillard — Wed, 17 Apr 2024 17:52:38 GMT

Hello,

Recently we've seen some real slow downs on our network. It turns out according to the netgear the ruckus APs are attached to something similar to a DDOS attack is occuring on the ports connected to our APs.

Is there a way to find the mac address on the Ruckus units that is causing the issue so we can block it?

Re: DDOS attack

abilashpr — Fri, 19 Apr 2024 06:06:10 GMT

Dear @bdillard ,

Best source, is to do a packet capture on wired or wireless interface and you should be able to find the source of DDOS attack.

Regards,

Abilash

Re: DDOS attack

bdillard — Fri, 26 Apr 2024 01:29:38 GMT

Thanks, all of these locations are remote so it will take a while to get it set up (plus I need to brush up on my Spanish for one of them)

Re: DDOS attack

GiulSteinauer — Wed, 07 May 2025 09:54:45 GMT

I had a similar issue and found out it was caused by traffic generated through a Stresser tool aimed at random ports on my network. What helped was setting stricter firewall rules and temporarily geoblocking countries I don't interact with. Also noticed my logs filled up fast, so I set automated log rotation to keep things running smoother.