When you get the Zone Alarm popup alert, there is a button called "more info". This will take you to their "Alert Analyzer" page. There you can click the "Whois" tab and presto the originating ISP appears.

Dragonseye