You can create a htaccess file and block an ip for the whole server:
AuthUserFile /www/yourserver/www.dir.com/cgi-bin/.htaccess
AuthGroupFile /dev/null
AuthName "http://www.dir.com/cgi-bin"
AuthType Basic
order allow,deny
allow from all
deny from ***.**.***.**
By deny from, you can put the ip address and this will block it for all cgi-bin activity. If you do this for de HTML dir, the party is over. That ip can't access nothing on your server.
But! They can use a proxy and you're off by zero.
