這也算是一次入侵案件嗎？

[deave]

不會啦！WINSON版主哥！只要有討論的空間，就會有成長的空間呀！希望不要半途而廢就是了！我一直都有這方面的問題（曾經碰上駭客，被盜用帳號，被用了五千多元，那是三年前的事了....）而能夠一起解決問題才是最終目地.....也許一直出現新問題.....

[arthurh]

原始作者是 : winson
使用LockDown2000

據我所知既使他用了很多台電腦<IP>當跳板~~還是可以用逆流法追蹤的~~不是嗎??~~
ㄟ我所知道的跳板方法是用UNIX~~可以去查他的紀錄吧~~
ㄟ~~聽說9X也可以用跳板~~有沒有人可以教一下呢?!~~呵呵!~

[/B]

在win 9x下用sub 7 的 port redirect這個功能就可以了
不過知道就好，可別拿別人來開刀

[arthurh]

原始作者是 : deave
感謝版主給我的回應！我一次把資料post出來看看把！（我不知道有沒有用！）

Checking Class C (net.net.net.host) network address...address ok.

--------------------------------------------------------------------------------
Scanning IP address 211.236.21.208.
--------------------------------------------------------------------------------
Performing ping to 211.236.21.208.
--- ping ---
PING 211.236.21.208 (211.236.21.208): 16 data bytes
24 bytes from 211.236.21.208: icmp_seq=0 ttl=103 time=291.1 ms
24 bytes from 211.236.21.208: icmp_seq=1 ttl=103 time=265.6 ms
24 bytes from 211.236.21.208: icmp_seq=2 ttl=103 time=283.3 ms

--- 211.236.21.208 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 265.6/280.0/291.1 ms

--------------------------------------------------------------------------------
Performing NS lookup to retrieve hostname.
--- nslookup ---



--------------------------------------------------------------------------------
Performing trace route to 211.236.21.208.
--- Traceroute ---
1 gw.cust.lockdown2000.com (216.204.66.1) 3.314 ms 2.913 ms
.
.
.
不好意思，太多了，我刪了一些
24 210.98.224.114 (210.98.224.114) 237.305 ms 237.058 ms 234.761 ms
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *

--------------------------------------------------------------------------------
Attempting to find owner of IP address 211.236.21.208.
--- whois ---
[whois.arin.net]
Asia Pacific Network Information Center (NETBLK-APNIC-CIDR-BLK)
These addresses have been further assigned to Asia-Pacific users.
Contact information can be found in the APNIC database,
at WHOIS.APNIC.NET or http://www.apnic.net/
Please do not send spam complaints to APNIC.

Netname: APNIC-CIDR-BLK2
Netblock: 210.0.0.0 - 211.255.255.255

Coordinator:
Administrator, System (SA90-ARIN) [email protected]
+61-7-3367-0490

Domain System inverse mapping provided by:

NS.APNIC.NET 203.37.255.97
SVC00.APNIC.NET 202.12.28.131
NS.TELSTRA.NET 203.50.0.137
NS.RIPE.NET 193.0.0.193

Regional Internet Registry for the Asia-Pacific Region.

*** Use whois -h whois.apnic.net***

*** or see http://www.apnic.net/db/ for database assistance ***


Record last updated on 03-May-2000.
Database last updated on 29-Jan-2001 18:35:13 EDT.

The ARIN Registration Services Host contains ONLY Internet
Network Information: Networks, ASN's, and related POC's.
Please use the whois server at rs.internic.net for DOMAIN related
Information and whois.nic.mil for NIPRNET Information.

--------------------------------------------------------------------------------

全部了！算有入侵到嗎？

這只是你反查回去的report
無法看出你是否被入侵
不過lockdown這個程式對於有人ping你或是掃你的port都會提出警告
在美國的法律判例認定掃port並不是非法的行為
也許他是有入侵的意圖
但是只來按電鈴而沒有入侵你家應該就不是犯法的行為

相對的上面的report你在反查時也ping了對方
對方如果也裝了lockdown
他的電腦也會出現alarm
也會出現你的ip
他應該會適可而止