Easy way to see where BW is coming from?

I have incoming BW to my server that I can not seem to figure out where it is coming from. Is there anyway to tell using NodeWorx exactly where its coming from and if it is for a SiteWorx account or just someone trying to hack my box?

Thanks for the info.

NodeWorx just meters the eth0 counters Justec and has no way of knowing (in the current form) where traffic originated.