DOS attack? Seriously?

[brythespy]

I know residential DoS attacks are very, very rare, but my YouTube channel isn't exactly the smallest (or biggest) out there. Some pissed off guy might be doing something, or it could be the massive amount of people I killed in COD Black Ops (ha)

[admin login] from source 1.1.1.3, Wednesday, April 24,2013 01:28:56
[DoS Attack: RST Scan] from source: IP_PRIVATE, port 31800, Wednesday, April 24,2013 00:45:16
[DoS Attack: RST Scan] from source: 125.60.241.236, port 53541, Wednesday, April 24,2013 00:38:01
[DoS Attack: RST Scan] from source: 114.255.218.6, port 29948, Wednesday, April 24,2013 00:30:06
[DoS Attack: RST Scan] from source: 219.142.99.9, port 3150, Wednesday, April 24,2013 00:29:56
[DoS Attack: RST Scan] from source: 202.112.90.201, port 20931, Wednesday, April 24,2013 00:29:46
[DoS Attack: RST Scan] from source: IP_PRIVATE, port 30805, Wednesday, April 24,2013 00:27:46
[DoS Attack: RST Scan] from source: IP_PRIVATE, port 30671, Wednesday, April 24,2013 00:25:26
[DoS Attack: RST Scan] from source: IP_PRIVATE, port 25565, Wednesday, April 24,2013 00:23:46
[DoS Attack: RST Scan] from source: IP_PRIVATE, port 25565, Wednesday, April 24,2013 00:06:56
[DoS Attack: RST Scan] from source: 201.77.49.42, port 15143, Wednesday, April 24,2013 00:05:08
[DoS Attack: RST Scan] from source: IP_PRIVATE, port 28883, Wednesday, April 24,2013 00:04:16
[DoS Attack: RST Scan] from source: IP_PRIVATE, port 28235, Wednesday, April 24,2013 00:01:46
[DoS Attack: RST Scan] from source: 118.68.124.95, port 26947, Tuesday, April 23,2013 23:58:55
[UPnP set event: del_nat_rule] from source 1.1.1.3 Tuesday, April 23,2013 23:58:36

Should I be alarmed? One google result says they're harmless. Messages like these happen around the same times every day, and there are hundreds or thousands of them, to the point where my router log doesn't even record everything.

Intersting note, "IP_PRIVATE", port 25565, is actually my friends IP, that I've blocked out. And the port 25565 is for our Minecraft server. Is it possible that they're attacking me throguh my friends' server?

Pretty sure this is harmless, just posting on the site to be sure.

 

[Hawkeye22]

A lot of computesr become a part of zombie networks and can be used for DoS attacks. This probably isn't an attack as much as a port scan checking for vulnerabilities. My router gets these a lot, even from china and korea, LoL! As long as your router is dropping those packets, you are safe.

I also see this a lot after I close down a torrent as other computers think you are still connected for a while and will continiue to try and reach you. These usually stop after a minute or two.

 

[bill001g]

It depends exactly what the router means. If it is doing this for a single packet then it is a waste of time, if this one entry represents thousands of packets then there may be a issue. Hard to say it is a well know issue for firewall/IDS systems to cry wolf for things and cause more problems that if you ignored it.

It is not uncommon to see this from torrents or skype or any other service that operates on a peer to peer. This could be as simple as your machine opened a connection at one time to one or more of these machines and did not properly close it.