Event ID - 2002

Port No2002
Service Nameslapper
RFC Doc0
ProtocolTCP
DescriptionSlapper is a Worm that infects UNIX based systems running older versions of OpenSSL and Apache.
Reference LinkPort No:2002 And Service Name:slapper Of Protocol:TCP
AttackFirewalling recommendations: Block port 2002 UDP outgoing to ensure detection of Slapper infected hosts.
Attack detection: Activity on port 2002 is a good indication that systems have been compromised.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.