dynamic ban-list

hello,
i am looking for a way to ban ip-addresses which do open to many connections
usually from LAN-side to the internet.
typical routers are c876, 878 and c1720.
could someone please point me in the right direction to do that, if possible
at all?
thx.
Telecom, Cabling and VoIP continues...
Tags: Telecom cat6