Why is public access to your term server allowed?
I realise it's a term server, but surely people should have to VPN in first? I don't like open holes facing the Internet - anything other than access for a proxy, a mail proxy and very few other bits and bobs should be plugged. Dictatorship ftw!