Check any website or ip addresses being spoofed then you can blacklists, This near to be called a Firewall