OT - Slammer still out there?

[MoFunk]

Man I just looked at my firewall logs and have been hit from various ip's with the stinkin slammer worm. Can't believe it is still roaming around out there! Anyone else notice this?

 

[Orange Kid]

Could this be the same thing?

 

[n0cmonkey]

I still see code red alarms all over the place.

 

[MoFunk]

Originally posted by: Orange Kid
Could this be the same thing?

It very well could be but the times of the firewall hits and the time of the web log do not match. After further investigation it appears that this is the ol nimda worm. I am new to this so it threw up a red flag since it appeared that someone had actually got in and was trying to run some script.

 

[Coolkid]

Yeah i get hundreds if not thousands of port scans every day
But if you are using Smoothwall, you can configure it to ignore attacks from the port that Slammer uses