Port 4569IAX2
The Inter-Asterisk eXchange protocol version 2 (IAX2) is a VoIP protocol used primarily to enable communication between Asterisk PBX systems. It simplifies the transmission of voice and signaling information by combining both into a single data stream, enhancing NAT traversal and bandwidth efficiency. Widely deployed for trunking between PBXs and voice gateways, IAX2 optimizes voice quality over varying network conditions and minimizes overhead compared to other VoIP protocols like SIP..
- transport
- udp
- in transit
- cleartext
- assignment
- official
- risk
- 4/10
- lookups
- 8,001
single transport
payload readable on path
registered with iana
caution
rank 636 of 993 · top 64%
Technical Details
what runs on :4569Inter-Asterisk eXchange version 2 (IAX2) is a communications protocol used for setting up and managing VoIP connections, particularly between Asterisk-based private branch exchanges (PBX). Unlike SIP and RTP, IAX2 consolidates both signaling and media transmission into a single data stream over UDP, which simplifies configurations, especially across NAT devices, and reduces required ports. The encapsulation design results in decreased bandwidth usage, better handling of multiple simultaneous calls via multiplexing, and streamlined firewall management.
Designed with trunking efficiency in mind, IAX2 allows multiple channels to be multiplexed over a single connection. This benefits inter-PBX communications or connections to VoIP service providers by optimizing bandwidth and lowering latency. It supports features such as call authentication, encryption (via extensions and add-ons), voice codecs negotiation, and call control signaling, making it suitable for complex multi-site deployments.
The protocol leverages UDP port 4569 by default, facilitating simpler traversal through firewalls and NAT. Its architecture reduces the number of open ports, which simplifies security management and troubleshooting. IAX2's tight integration with Asterisk systems fuels its adoption in open-source telephony projects and commercial solutions focused on scalable, efficient VoIP implementations.
Security Information
exposure of :4569risk score
4/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
voice and chat averages 3.9 across 120 ports — this one sits 0.1 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
Common vulnerabilities associated with IAX2 include:
- Exposure to brute force attacks due to weak authentication mechanisms.
- Susceptibility to denial-of-service (DoS) attacks through resource exhaustion or malformed packet injection.
- Risk of eavesdropping or call tampering if encryption extensions are not implemented.
- Potential NAT traversal misuse, which can create covert communication channels.
Mitigation strategies involve:
- Implementing strong authentication credentials and account lockout policies.
- Employing rate limiting and intrusion detection systems SIP-Friendly firewalls/wAFs.
- Enabling encryption features such as IAX2 over TLS or VPN encapsulation to secure signaling and media.
- Regularly updating Asterisk software and monitoring logs for malicious activity.
- Restricting inbound connections to trusted IP addresses and implementing access control lists (ACLs).
Related Ports
the 8 most looked-up other ports in voice and chat — 120 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9090 | Openfire Admin Console | TCP | Web Services | caution | 34.2k |
| :1513 | Garena Gaming | TCPUDP | Gaming | caution | 33.1k |
| :9091 | Openfire Admin Console (SSL) | TCPtls | Web Services | caution | 28.3k |
| :2031 | Mobrien Chat | TCPUDP | Web Services | caution | 27.7k |
| :1720 | H.323 Signaling | TCP | Network Services | caution | 26.5k |
| :6005 | Camfrog Chat | TCP | Voice and Chat | caution | 25.2k |
| :3001 | Miralix Phone Monitor | TCP | Network Services | caution | 21.7k |
| :9009 | Pichat Server | TCPUDP | Network Services | caution | 19.7k |
risk mix of the 8 listed
- caution100%
1 of 8 encrypted