Help to block an IP that is trying to hack my server 1

[CarolinaCountryBoy]

Hey Guys/Gals,

I have some numbskull over in China trying to get into one of my servers through my PIX. I dont care If I block the whole darn Class B address over there because they dont have any business connecting to us.

I have a PIX515e. I can do some stuff on it, but how would I block an IP (all ports) like that? Here is the actual IP that was going after my server 87.119.200.238.

Any help would be appreciated.

Thanks,

Jim

 

[brianinms]

access-list outside-inbound deny ip host 87.119.200.238 any


access-list outside-inbound in int outside

 

[CarolinaCountryBoy]

Thank you Brian

 

[zaccaz]

hi brian, just curious what's this command actually means? thx

access-list outside-inbound in int outside

 

[brianinms]

You have to create the access-list and then apply said ACL to an interface.

 

[baddos]

You can also just "shun" that IP address as well, although it's not a block that would be saved in the configuration so a reboot would allow them back.