Firewall shows hack attempt

My Sygate personal firewall keeps showing that a intrusion has been attempted. When i trace and whois the IP address it leads me to a website called www.ripe.net. It says it is a "network coordination centre "

What is a network coordination centre and should i allow it access to my computer?

Thanks,

Alex

 

Hello alex,

As far as I can tell, its one of the Internet "pipes" that web traffic flows thru.

As for blocking it, Sygate did block an unsolicited intrusion. I would not block the IP address as of yet because legitimate (solicited) traffic may use ripe.

This could have been a port scan by an infected system using ripe to probe for open ports or a probe by an ISP for "keep alive" purposes.

I wouldn't worry too much about it unless its constant, and if its about the same time every day, I would say its an infected system that's logging on at a regular time.

In any case, the firewall is doing its job and blocking intrusions.

Regards - Charles

 

The problem is that it is constantly happening. The picture below shows my log viewer:



It seems to happens roughly every 2 to 3 hours and scans roughly the same ports.

Any ideas?

 

Oh right, so the port scan is not actually coming from them but someone registered with them?? (If that makes sense )

 

Hello alex,

They are Port Scans, while annoying, not too much you can do about it, nor are they dangerous.

Regards - Charles

 

ok, thanks