PortPeeker Capture of DipNet/OddBob scan

DipNet/OddBob scans ports 11768 and 15118 to check if a system is already infected and if so, then it doesn't attack the system via a vulnerability on TCP port 445.  NOTE the scan is the same for port 11768 and 15118.

149.99.115.233 : 4023 TCP Data In Length 39 bytes
MD5 = 8CCAFAC4CB8A7F1F1E2C0196B59A45E2
---- 16/01/2005 21:46:03.202
0  5F 5F 31 32 33 5F 61 73 64 61 73 64 66 64 6A 68 __123_asdasdfdjh
10 73 64 66 5F 53 41 46 61 73 64 66 68 6A 73 64 66 sdf_SAFasdfhjsdf
20 5F 66 73 64 31 32 33 _fsd123

While PortPeeker is not an officially supported product if you have any suggestions or find any bugs please send them to PortPeeker@LinkLogger.com