Hacker problems new to forum

Nuke Cadet Joined: Nov 08, 2006 Posts: 1

I am new to this forum and could not really figure out where to post this question.
I Have Norton Systemworks and anti virus.
Lateley when I am online I keep getting security worning that Norton worm protection has block a worm hacking attempt. If I click on the more info button it gives me the IP adresses of the said hackers, My question is what can I now do with this information?Is there any way to find out who these people are or let them know I know who they are?
Are there any other options to me I get tired of it they are verry presistant once they start it will come up every 5 minutes or so all the IP #'s are usaually the same except the last 2or three and the ones in the (#)
they change.
I contacted my service provider and was told not to worry about it that my software is actualy blocking them. But how do I get it to stop?
Any suggestions would be greatly appreciated.
the first seven #'s are the same as my own IP address

These are the #'s that stay the same 209.16.81
the ones that follow change to the following each time it comes up.
18(3491)--
26(1976)--
142(3581)--
73(1401)--
101(1750)--
92(2230)--
90(1432)--

Is there any thing I can do to find out who they are and what can I do to shut them down?

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

Hi

Well this is a strange question for PHP-Nuke forums!

However there isnt really much you can do to stop the attacks and like your ISP said your firewall is blocking them.

There may be an option in norton to switch off the notifications, however, you could always swap firewalls if you dont like it.

I use the XP SP2 firewall (which IMO is better than nortons anyway) and I never have any problems.

I also use NOD32 which is an excellent antivirus, however there are free ones like AVG which are very popular.

Site Admin Joined: Aug 17, 2003 Posts: 12397

Well you can generally lookup the IP with whois

http://whois.domaintools.com

That will give you someone to report to usually.

The 209.16.81.1 block seems to be
http://whois.domaintools.com/209.16.81.1

I-55 Internet Services

Support Mod Joined: Oct 19, 2004 Posts: 1032 Location: UK

Could be proxy though, and in my experience ISP's dont take any notice.

However feel free to try