Spyware question!

[laylah]

I am now using ZoneAlarm as suggested by KitchenWitch a couple of weeks ago. About 20 minutes ago I had a high risk hit. This is what I found, could someone please "translate" for me? Thanks in advance...Jenn

OrgName: Road Runner
OrgID: RRNY
Address: 13241 Woodland Park Road
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US

ReferralServer: rwhois://ipmt.rr.com:4321

NetRange: 69.200.0.0 - 69.207.255.255
CIDR: 69.200.0.0/13
NetName: RRNY
NetHandle: NET-69-200-0-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.RR.COM
NameServer: DNS2.RR.COM
NameServer: DNS3.RR.COM
NameServer: DNS4.RR.COM
Comment:
RegDate: 2004-03-26
Updated: 2005-05-17

OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: [phone]
OrgAbuseEmail: Whois Privacy and Spam Prevention by Whois Source

OrgTechHandle: IPTEC-ARIN
OrgTechName: IP Tech
OrgTechPhone: [phone]
OrgTechEmail: Whois Privacy and Spam Prevention by Whois Source

[Maestro]

1. Do you use Roadrunner as your ISP?

If so, Roadrunner was probablly scanning the port that you use to connect to the Internet.

[laylah]

2. No, I don't. Thanks!

[MadisonProgressive]

3. It's the NSA.

[RoyGBiv]

4. That's just the whois record ...

It's just telling you where whatever it was came from.

What kind of "high risk" hit did you get, a UDP scan or what? What did ZA say it was?

You're going to get a lot of high risk hits. That's why you need a firewall. The vast majority of them will be scans for open ports on your system. ZA will drop them, and that's that. Don't worry about it unless you start noticing a consistent attempt from a single IP, which might indicate some individual is targeting you.