IP address lock outs after unsuccessful logins

[willjay]

My event viewer security log show many hackers attempting to login over the
internet. Most are trying Administrator. Is there a best practice settings
I should use. I was thinking about enabling the login attempts lock out,
however, wouldn't that prevent me from being able to login as Administrator
if it gets locked out from someone exceeding the attempts.

Is there a way to lock out an IP address for say 30 mins if they attempt to
login unsuccessfully 3 time or whatever?

thanks
wj

 

[Phil]

My event viewer security log show many hackers attempting to login
over the internet. Most are trying Administrator. Is there a best
practice settings I should use. I was thinking about enabling the
login attempts lock out, however, wouldn't that prevent me from being
able to login as Administrator if it gets locked out from someone
exceeding the attempts.

Is there a way to lock out an IP address for say 30 mins if they
attempt to login unsuccessfully 3 time or whatever?

thanks
wj

The first thing I'd do is update your virus definitions, then perform a
full scan of every computer on the network.