Before you get too gung ho about IP banning, keep in mind that most people are now surfing with dynamic IPs. If you see a hacker and block his IP, you are blocking the IP not the hacker. He could easily be back shortly on a new IP but other people on the same host will be blocked whenever they are assigned the IP he was using when you blocked him.
I’ve started implementing code that detects the hacker (XSS attacks and snooping directories)and redirects him to a page that informs him he has been detected and that his host has been emailed. The later is a bluff because I don’t know how to programatically determine a host’s email from an IP but it appears to have had some success.
EDIT: Geez, I just noticed the date on this. :oops:
