Paul Makepeace wrote: Assuming you're running under mod_perl, have a global hash of IPs and scores. Each score is a Tie::Scalar::Decay. For each page hit, check the score for the originating IP, and if above a threshold, system("stuff to filter out all packets from that IP"). Then increment the score. You'll need to tweak the threshold and the decay parameters - that is, the time interval and the decay function. You might like to also note somewhere what time each IP was blocked and periodically unblock them. You might also like to have the blocks expand themselves if there's already a block in place for a near neighbour of someone you're about to add to the naughty list. -- header FROM_DAVID_CANTRELL From =~ /david.cantrell/i describe FROM_DAVID_CANTRELL Message is from David Cantrell score FROM_DAVID_CANTRELL 15.72 # This figure from experimentation