UDP 5060
Synopsis
- UDP port 5060 is the default port for the Session Initiation Protocol (SIP) used in many VoIP systems.
- Open-source PBXs like Asterisk and FreeSWITCH listen on UDP/5060 for SIP registrations and call setup.
- SIP proxies/registrars such as Kamailio and OpenSIPS use UDP/5060 as a primary interface.
- Commercial platforms including Cisco Unified Communications Manager, Avaya Aura/IP Office, and 3CX use UDP/5060 for SIP trunks and IP phone registration.
- Many IP phones (Poly/Polycom, Yealink, Cisco, Grandstream) default to UDP/5060 to communicate with their SIP servers.
- Service-provider platforms like BroadSoft/BroadWorks and ITSPs such as Twilio Elastic SIP Trunking and Vonage Business support SIP over UDP/5060.
- Softphone apps (e.g., Zoiper, Linphone, MicroSIP) commonly register over UDP/5060 when configured for SIP/UDP.
- UDP/5060 is frequently targeted for exploitation, including SIP scanning, credential brute-force, toll fraud, and SIP INVITE/REGISTER flood or reflection attacks.
Observed activity
Last 30 days
Detailed chart