i use zonealarm. you should expect 100's of "attacks" every day. 99.9% arnt attacks though. somone typed in the wrong ip somewhere. you'll get possible 1000's of "attacks" (which are just conection attempts) if you use napster or scour or any file shariong software.

if you are being attacked you'll know b/c the same ip tries to connnect to every single port on your computer. zonealarm bloacks all connection attempts though.


to trace an ip go here
http://www.arin.net/whois/arinwhois.html