Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Mysterious Host Names Sending Communicating With Computer


  • Please log in to reply
7 replies to this topic

#1 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,011 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:01:51 PM

Posted 28 July 2006 - 03:53 PM

In looking at the logfile for networking in my Essential NetTools program, I have seen some Host Names that I do not know at all. My ZoneAlarm FireWall did not block these. What are they? Are any of them bad guys that I need to block? How do I block them if so?

Communicating with FireFox:
a209-152-119-232.deploy.akamaitechnologies.com
s170.x1.fr
webcluster2a.telenet-ops.be
planetlab16.Millennium.Berkeley.EDU

Communicating with Thunderbird:
mirrors.easynews.com (I did just update it. Would this be the update host?)

Communicating with vsmon.exe:
a209-152-119-254.deploy.akamaitechnologies.com

Orange Blossom

Windows XP Home SP2
AdAware SE Plus
Spyware Blaster
SpyBot
SpyWare Guard
ZoneAlarm Security Suite
The Ultimate TroubleShooter
Essential NetTools
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:12:51 PM

Posted 28 July 2006 - 04:29 PM

Firefox and Thunderbird updated starting Wednesday. 10 to 1 that is what the three items relate to.

Akamai provides many IT services like application hosting, content delivery,
and streaming media services, but they are probably best known for their
massive distributed computer infrastructure. In lay terms, they have upwards
of 15,000+ servers positioned around the globe providing content (software
downloads, etc) and media (like QuickTime, RealAudio, or Windows Media
files) for their customers (the likes of Apple, GM, MTV, Department of
Defense, IBM, Microsoft, Monster.com, Yahoo!, Adobe...).

So for instance, say your company developed a web site/application for use
by your customers. On this website, you wanted to make available a few
hundred moderate length video clips. If you intend your website to have even
moderate traffic, you will quickly realize the potentially prohibitive
time/energy/costs involved with building an infrastructure capable of
delivering this content - to make those files available reliably you'll need
lots of bandwidth, reliable servers with a backup strategy, redundant power
and A/C, lots of RAID-ed disk space, finely tuned security precautions, lots
of manpower to watch over everything, and on and on and on.

This is where Akamai comes in. They have the infrastructure already in place
to deliver these services. Companies can save money by having Akamai deliver
their content for them. Akamai has become so ubiquitous that it's hard to go
a day without (perhaps unknowingly) pulling at least some content of one of
their servers, as you have discovered!
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 Orange Blossom

Orange Blossom

    OBleepin Investigator

  • Topic Starter

  • Moderator
  • 37,011 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:01:51 PM

Posted 28 July 2006 - 09:53 PM

Firefox and Thunderbird updated starting Wednesday. 10 to 1 that is what the three items relate to.
.......
Akamai provides many IT services like application hosting, content delivery,
and streaming media services, but they are probably best known for their
massive distributed computer infrastructure.
This is where Akamai comes in. They have the infrastructure already in place
to deliver these services. Companies can save money by having Akamai deliver
their content for them. Akamai has become so ubiquitous that it's hard to go
a day without (perhaps unknowingly) pulling at least some content of one of
their servers, as you have discovered!


Thanks, that's cool :thumbsup: buddy215, but what about these?

Communicating with FireFox:
s170.x1.fr
webcluster2a.telenet-ops.be
planetlab16.Millennium.Berkeley.EDU


Thanks for the info., I wasn't able to find anything on a google search.

Orange Blossom :flowers:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#4 tos226

tos226

    BleepIN--BleepOUT


  • Members
  • 1,577 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:LocalHost
  • Local time:01:51 PM

Posted 29 July 2006 - 07:43 PM

Zone Labs uses akamai to deliver updates, new trash signatures for virus scans and so on for Zone Alarm products.
Microsoft uses akamai to do updates, as far as I recall.

#5 Orange Blossom

Orange Blossom

    OBleepin Investigator

  • Topic Starter

  • Moderator
  • 37,011 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:01:51 PM

Posted 29 July 2006 - 08:50 PM

Thanks for the info. tos226. :thumbsup:

Orange Blossom :flowers:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#6 Guest_bg fun_*

Guest_bg fun_*

  • Guests
  • OFFLINE
  •  

Posted 10 August 2006 - 02:02 PM

Zone Labs uses akamai to deliver updates, new trash signatures for virus scans and so on for Zone Alarm products.


This is my problem too. From time to time, completely randomly, my Zone Alarm opens two or more ports to Akamai server and I am unable to close or filter them. They do nothing bad... but whenever are those ports to Akamai opened, EVERY program I run causes a "domain" packet to be sent to network - resulting in slowdown of said program's startup. I am furious! I tried everything to make it stop: tried to block Akamai server in hosts file, to block it directly in Zone alarm, tried to find any option to turn this feature off... no avail. I thought firewalls are supposed to STOP my computer from sending things to network, not to send things themselves. I'll delete Zone Alarm and demand my money back. :-/

#7 Orange Blossom

Orange Blossom

    OBleepin Investigator

  • Topic Starter

  • Moderator
  • 37,011 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN

Posted 10 August 2006 - 02:29 PM

I use ZoneAlarm and my programs don't do this when ZoneAlarm communicates with the internet. Let's check your settings for the other programs in the firewall. You may have allowed them to send stuff when they shouldn't.

Restore the ZoneAlarm window.

First let's check your general program settings. Click on Programs Control on the left side, then click on the Main tab on the upper right side. I have Program control set to medium and SmartDefense Advisor set to medium. I also have a dot by On under Internet lock.

Now, click on the programs tab at the top right. This will show a listing of programs and their permissions.

An example: SpywareBlaster permissons has been set by the system. There is a green check under "trusted" and "internet" under the access column, and red x's under "trusted" and "internet" under the server column, and there is a red x under send e-mail. This program never tries to send stuff to the internet except when I update the program.

It is possible that you have allowed program to act as servers that don't need to. One by one, right click on a program name that is causing you problems. Click on remove: The system will then automatically set the program permission settings the next time the program runs.

Do not remove multiple programs from the list or immediately one after another as this can cause a system crash, especially if those programs are currently in use.

Hope this helps,

Orange Blossom
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#8 Guest_bg fun_*

Guest_bg fun_*

  • Guests
  • OFFLINE
  •  

Posted 10 August 2006 - 03:28 PM

Thank you for your time and willingness to help. I tried as you said, but it doesn't stop. It seems to be feature of new version of ZA Pro. It is definitely related to ZA, because when I shut down ZA, all these requests to network are stopped and all ports to Akamai are closed.

-----------------------------------

EDIT: Seems I found a solution. I turned off a SmartDefense Advisor *completely* - and all network requests stopped. No opened port to Akamai in sight, either. I guess I can do without SmartDefense Advisor; it is weird though, because I was using ZA for more than three years now and I never encountered any trouble with SDA before...

Edited by bg fun, 10 August 2006 - 03:48 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users