Event ID - 20432

Port No20432
Service NameShaft
RFC Doc0
ProtocolTCP
DescriptionDistributed DoS tool / Steals passwords
Reference LinkShaft
AttackRegisters:
Does not register.

Files:
idle - 28,969 bytes tcp.log - ??? bytes pp.pl - 2,795 bytes sniff.pid - 6 bytes s - 7,654 bytes chattr - 7,656 bytes vi - 437,428 bytes tcsh - 262,756 bytes ps - 31,312 bytes shaftmaster - 25,123 bytes shaftnode - 15,184 bytes shaftnode.c - 19,806 bytes hitlist - ??? bytes

Actions:
Distributed DoS tool / Steals passwords
Is able to either send UDP, TCP or ICMP floods, or all three at the same time.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.