[Snort-users] spy sender alerts - what is this
jas at ...129...
Thu Oct 5 14:39:50 EDT 2000
Anybody know anything about "spy sender" - UDP port 1807. Anything I can
find seem like it's in the backdoor/remote control category but info is VERY
limited. The Arachnids database talks about one that uses TCP and I found a
link at http://www.mks-vir.com.pl/trojany/spysender065b.html that seems like
a match but I can't speak polish very well;).
More information about the Snort-users