瑞星卡卡安全论坛

首页 » 技术交流区 » 入侵防御(HIPS) » 请高手来看看我的ARP跟踪记事本,这是怎么回事,黑客攻击么?谢谢各位大侠了
twh321 - 2010-10-6 18:08:00
这是我摘取了一部分日志,我是学文的,对这些不是很懂,望高手指点,应该怎样做才好。
2010-10-06 17:48:37 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:48:37 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:48:42 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:48:42 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:48:43 CLOSE UDP 192.168.2.84 219.146.0.130 64098 53 - - - - - - - - -
2010-10-06 17:48:43 CLOSE UDP 192.168.2.84 219.146.0.130 57285 53 - - - - - - - - -
2010-10-06 17:48:43 CLOSE UDP 192.168.2.84 219.146.0.130 64099 53 - - - - - - - - -
2010-10-06 17:48:47 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:48:47 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:48:52 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:48:52 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:48:57 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:48:57 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:49:02 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:49:02 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:49:07 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:49:07 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:49:12 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:49:12 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:49:16 OPEN UDP 192.168.2.84 219.146.0.130 57808 53 - - - - - - - - -
2010-10-06 17:49:16 OPEN TCP 192.168.2.84 211.103.159.78 3261 80 - - - - - - - - -
2010-10-06 17:49:17 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE
2010-10-06 17:49:17 DROP UDP 192.168.2.84 255.255.255.255 2291 9997 49 - - - - - - - RECEIVE

用户系统信息:Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0;  Embedded Web Browser from: http://bsalsa.com/; .NET CLR 2.0.50727)
twh321 - 2010-10-6 18:10:00
到现在还在不住的出现这种情况,从不间断,请大大指点。
1
查看完整版本: 请高手来看看我的ARP跟踪记事本,这是怎么回事,黑客攻击么?谢谢各位大侠了