1. A method of automatically generating rules for an intrusion detection module comprising: analyzing a data packet received from a communication network by the intrusion detection module using a set of rules, the data packet containing a source IP address; in response to the packet failing the analyzing operation, searching an event database for events associated with the source IP address of the packet, if the event database contains an event record associated with the source IP address of the packet, generating a new rule to block subsequent packets from the source IP address of the packet for a predetermined period of time; and adding the new rule to the set of rules used by the intrusion detection module.