Okay, so I have been running Zone Alarm for a long time. It usually logs about 20 attempted "intrusions" in a typical internet session of a few hours. Two days ago I downloaded and ran Spybot to erase tracking cookies and whatever other baddies it found. Since then, according to Zone Alarm, my computer has been getting hammered by a wide range of IP's that start with 208.59.xxx.xxx



Does anybody know who owns these IP's? Some examples are 208.59.114.44, 208.59.202.214, 208.59.202.212, 208.59.96.6



I can't figure out why all of a sudden these intrusions have increased tenfold. Can someone shed some light on this for me?



Thanks!

 

maybe people found out how much pr0n you got on your machine and they're trying to get in..

 

Nope. That's not it...

How do I find out who has those IP addresses?

 

Registrant:

RCN (RCN5-DOM)

105 Carnegie Center

Princeton, NJ 08540

US



Domain Name: RCN.COM



Administrative Contact:

RCN (ETS3-ORG) abuse@RCN.COM

7921 WOODRUFF CT

SPRINGFIELD, VA 22151-2108

US

703-321-8000 fax: 703-321-8316

Technical Contact:

(EROLS-NOC) domreg@RCN.COM

RCN

7921 Woodruff Court

Springfield, VA 22151

US

703-321-8000 fax: 123 123 1234



Record expires on 29-Jun-2011.

Record created on 08-Oct-2002.

Database last updated on 13-Aug-2003 13:51:39 EDT.



Domain servers in listed order:



AUTH1.DNS.RCN.NET 207.172.3.20

AUTH3.DNS.RCN.NET 207.172.3.21

AUTH4.DNS.RCN.NET 207.172.3.22

AUTH2.DNS.RCN.NET 207.172.3.20

 

Fascinating. Thanks for the detailed information, Phins. RCN aka erols aka Starpower is my ISP. Would these IP addresses represent other RCN subscribers? Or something else? How effective is Zone Alarm?

 

I wouldn't worry about it too much

 

Yeah, well. Maybe its nothing to worry about. But it sure is strange when you go from 20 or 30 Zone Alarm alerts to 2 or 3 HUNDRED in ONE DAY. Strange. I was just trying to educate myself as to the possible causes.

 

May be a coincidence.. my folks' firewall gets 150 on a good day, 1500+ on a bad day on thier cable modem..

 

is zone alarm telling you what ports are being hit? It's more than likely that Blaster worm that's going around at the moment

 

Yea I am sure it's the new worm, that's what it does, seek out other winblows boxes on the network.