1988RedT2

Okay, so I have been running Zone Alarm for a long time. It usually logs about 20 attempted "intrusions" in a typical internet session of a few hours. Two days ago I downloaded and ran Spybot to erase tracking cookies and whatever other baddies it found. Since then, according to Zone Alarm, my computer has been getting hammered by a wide range of IP's that start with 208.59.xxx.xxx



Does anybody know who owns these IP's? Some examples are 208.59.114.44, 208.59.202.214, 208.59.202.212, 208.59.96.6



I can't figure out why all of a sudden these intrusions have increased tenfold. Can someone shed some light on this for me?



Thanks!

Sinful7

maybe people found out how much pr0n you got on your machine and they're trying to get in..

1988RedT2

Nope. That's not it...

How do I find out who has those IP addresses?

phinsup

Registrant:

RCN (RCN5-DOM)

105 Carnegie Center

Princeton, NJ 08540

US



Domain Name: RCN.COM



Administrative Contact:

RCN (ETS3-ORG) abuse@RCN.COM

7921 WOODRUFF CT

SPRINGFIELD, VA 22151-2108

US

703-321-8000 fax: 703-321-8316

Technical Contact:

(EROLS-NOC) domreg@RCN.COM

RCN

7921 Woodruff Court

Springfield, VA 22151

US

703-321-8000 fax: 123 123 1234



Record expires on 29-Jun-2011.

Record created on 08-Oct-2002.

Database last updated on 13-Aug-2003 13:51:39 EDT.



Domain servers in listed order:



AUTH1.DNS.RCN.NET 207.172.3.20

AUTH3.DNS.RCN.NET 207.172.3.21

AUTH4.DNS.RCN.NET 207.172.3.22

AUTH2.DNS.RCN.NET 207.172.3.20

1988RedT2

Fascinating. Thanks for the detailed information, Phins. RCN aka erols aka Starpower is my ISP. Would these IP addresses represent other RCN subscribers? Or something else? How effective is Zone Alarm?

RotorBalls

I wouldn't worry about it too much

1988RedT2

Yeah, well. Maybe its nothing to worry about. But it sure is strange when you go from 20 or 30 Zone Alarm alerts to 2 or 3 HUNDRED in ONE DAY. Strange. I was just trying to educate myself as to the possible causes.

Sinful7

May be a coincidence.. my folks' firewall gets 150 on a good day, 1500+ on a bad day on thier cable modem..

drew

is zone alarm telling you what ports are being hit? It's more than likely that Blaster worm that's going around at the moment

phinsup

Yea I am sure it's the new worm, that's what it does, seek out other winblows boxes on the network.