my server has been attacked

[davidjpowell]

Hi

I run my own server here on SBS 2003. Just looked at todays logon file

Which seeems to indicate that someone has tried to break into the server. I had already disabled the account called adminstrator so I do not think they would have got access to anything, but am not certain. Is there anything I should check?

I would be grateful for any help on this one.

David

 

[timskemp]

Turkish DSL. Probably port scanning from a comprimised PC. One wonders how it got past ones firewall...

 

[davidjpowell]

I will have to look at that. I have a nasty suspicion, that I have done something silly having struggled to get port forwarding working on the router.

 

[timskemp]

I will have to look at that. I have a nasty suspicion, that I have done something silly having struggled to get port forwarding working on the router.

I suspect that may be so...