You are constantly being scanned, every single day. It's often fully automated and never sleeps. In this track we will discuss one method of automatically blocking those who maliciously scan your network by building and leveraging a dark-net address space. The presentation will focus on how to accomplish this task using a standard linux logging host and the Palo Alto Firewall's Dynamic Address Lists.