[Snort-users] spy sender alerts - what is this

Jerry Shenk jas at ...129...
Thu Oct 5 14:39:50 EDT 2000


Anybody know anything about "spy sender" - UDP port 1807.  Anything I can
find seem like it's in the backdoor/remote control category but info is VERY
limited.  The Arachnids database talks about one that uses TCP and I found a
link at http://www.mks-vir.com.pl/trojany/spysender065b.html that seems like
a match but I can't speak polish very well;).





More information about the Snort-users mailing list