Of course, when we tell people this, the first question we often get asked is "are these attacks REALLY out there still?" The answer is definitely "Yes!"
Take Slammer for instance. Over the last month, ThreatLinQ has detected no less than 73,300 infected slammer sources which produced tens of millions of packets. Sure, slammer packets are small, and not likely to cause too much congestion. But why let Slammer on your network at all, when it can be easily blocked?
Also, I should also point out that although slammer would never appear on YOUR network (our readers/customers tend to be on the ball,) infections do still occur. Below is a graph of a host that was clearly infected on 8/22/2008.
I wonder if the admin of this network has pulled out all his/her hair yet trying to figure out why the net is so slow...
