I'm part of a pretty small video game community and one of our members claims he was DoSed or DDoSed during a recent match. We are currently split as some people believe he was and others believe he wasn't.
Here are the router logs from the night:
Some of the arguments for: He was being sent packets from spoofed IPs. He was also being sent packets to port 4444 which is apparently used for malicious purposes.
Additionally one of the people who reviewed the information said that to be in this log it had to be an "Active" connection and that it wasn't just 4-5 fragmented packets but 4-5 connections.. is this accurate?
He also ran a Malwarebytes scan to see if he was infected with anything. The scan was clean.
People are also suspicious of the time and length of the attack. It happened when his team was Up 1 game, and lasted until the series was over and his team had lost (playing the final match down a member without him)
Arguments Against: Low number of Packets, and that random "bots" may have attacked him. Not really sure about the second one.
Just curious what a more professional opinion is so we can try to resolve the situation.. any help appreciated.