Session Initiation Protocol signaling for VoIP phones, PBXs (Asterisk, FreePBX) and SIP trunks.
Session Initiation Protocol signaling for VoIP phones, PBXs (Asterisk, FreePBX) and SIP trunks.
Expose only to trusted sources. Exposed SIP servers are scanned non-stop (SIPVicious, friendly-scanner) for weak extension passwords, followed by toll fraud. Allow only your trunk provider and phones, use strong secrets, and prefer 5061 (TLS).
Registry dates for this port: last modified 2014-04-09.
sudo ss -tlnp 'sport = :5060'sudo ss -ulnp 'sport = :5060'sudo lsof -nP -i :5060sudo netstat -tlnp | grep ':5060 'netstat -ano | findstr :5060Get-NetTCPConnection -LocalPort 5060 -State Listen | Select LocalAddress,OwningProcessnc -vz -w 5 HOST 5060Test-NetConnection HOST -Port 5060nc -vzu -w 5 HOST 5060Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.
sudo ufw allow from 203.0.113.10 to any port 5060 proto tcpsudo iptables -A INPUT -p tcp --dport 5060 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 5060 -j DROPsudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 5060 accept
sudo nft add rule inet filter input tcp dport 5060 dropNew-NetFirewallRule -DisplayName 'TCP 5060 trusted' -Direction Inbound -Protocol TCP -LocalPort 5060 -RemoteAddress 203.0.113.10 -Action Allowsudo ufw allow from 203.0.113.10 to any port 5060 proto udpsudo iptables -A INPUT -p udp --dport 5060 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p udp --dport 5060 -j DROPsudo nft add rule inet filter input ip saddr 203.0.113.10 udp dport 5060 accept
sudo nft add rule inet filter input udp dport 5060 dropNew-NetFirewallRule -DisplayName 'UDP 5060 trusted' -Direction Inbound -Protocol UDP -LocalPort 5060 -RemoteAddress 203.0.113.10 -Action AllowAll port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.