TCP 5060
Synopsis
- Port 5060/TCP is primarily used by the Session Initiation Protocol (SIP) for VoIP signaling over TCP (unencrypted).
- Popular PBX platforms that listen on 5060/TCP include Asterisk, FreeSWITCH, and 3CX Phone System.
- SIP proxies/registrars such as Kamailio and OpenSIPS commonly run on 5060/TCP.
- Enterprise UC systems like Cisco Unified Communications Manager (CUCM), Avaya Aura/Communication Manager, and BroadSoft BroadWorks use SIP on 5060/TCP when not using TLS.
- Session Border Controllers from Oracle/Acme Packet and AudioCodes handle SIP on 5060/TCP at network edges.
- Many IP phones and softphones (e.g., Cisco, Poly/Polycom, Yealink, Linphone, Zoiper) register or connect to servers on 5060/TCP.
- Microsoft Lync/Skype for Business can accept SIP over 5060/TCP for certain trunks/gateways (TLS on 5061 is typically preferred).
- This port is frequently targeted for SIP scanning and brute-force REGISTER/INVITE attacks to commit toll fraud or place unauthorized calls.
Observed activity
Last 30 days
Detailed chart