Why are there VoIP attacks from port 3058?
December 28, 2009
Posted by on
Been picking up more and more hits in the VoIP honeypots lately. What puzzles me, is that several of those originate from different IPs but same port number. IANA assigned port 3058 to the following:
videobeans 3058/tcp videobeans
videobeans 3058/udp videobeans
IPs that has hit one or more of our honeypots the latest days:
From port 3058
Notice the two consecutive IPs, 126.96.36.199 and .53.
But why port 3058… the reason is probably simple, but for now I’m guessing on the same software running on PCs with a public IP.