SANS blocker

[venon]

every day i get scan by diferent ips .
is there a script out there to auto ban those ips?

95.211.85.224 - - [24/Feb/2010:19:09:07 +0100] "GET /w00tw00t.at.ISC.SANS.DFind HTTP/1.1" 404 654
95.211.85.224 - - [24/Feb/2010:19:09:07 +0100] "GET /w00tw00t.at.ISC.SANS.DFind HTTP/1.1" 404 654
95.211.85.224 - - [24/Feb/2010:19:16:11 +0100] "GET /w00tw00t.at.ISC.SANS.DFind HTTP/1.1" 404 654
95.211.85.224 - - [24/Feb/2010:19:16:11 +0100] "GET /w00tw00t.at.ISC.SANS.DFind HTTP/1.1" 404 654
95.211.85.224 - - [24/Feb/2010:19:23:14 +0100] "GET /w00tw00t.at.ISC.SANS.DFind HTTP/1.1" 404 654
95.211.85.224 - - [24/Feb/2010:19:23:14 +0100] "GET /w00tw00t.at.ISC.SANS.DFind HTTP/1.1" 404 654

 

[nobaloney]

Yes, but it depends on your OS distribution and on your firewall. Search these forums for information on various firewalls.

Jeff