Port 4569IAX2

The Inter-Asterisk eXchange protocol version 2 (IAX2) is a VoIP protocol used primarily to enable communication between Asterisk PBX systems. It simplifies the transmission of voice and signaling information by combining both into a single data stream, enhancing NAT traversal and bandwidth efficiency. Widely deployed for trunking between PBXs and voice gateways, IAX2 optimizes voice quality over varying network conditions and minimizes overhead compared to other VoIP protocols like SIP..

transport
udp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
4/10

caution

lookups
8,001

rank 636 of 993 · top 64%

Technical Details

what runs on :4569

Inter-Asterisk eXchange version 2 (IAX2) is a communications protocol used for setting up and managing VoIP connections, particularly between Asterisk-based private branch exchanges (PBX). Unlike SIP and RTP, IAX2 consolidates both signaling and media transmission into a single data stream over UDP, which simplifies configurations, especially across NAT devices, and reduces required ports. The encapsulation design results in decreased bandwidth usage, better handling of multiple simultaneous calls via multiplexing, and streamlined firewall management.

Designed with trunking efficiency in mind, IAX2 allows multiple channels to be multiplexed over a single connection. This benefits inter-PBX communications or connections to VoIP service providers by optimizing bandwidth and lowering latency. It supports features such as call authentication, encryption (via extensions and add-ons), voice codecs negotiation, and call control signaling, making it suitable for complex multi-site deployments.

The protocol leverages UDP port 4569 by default, facilitating simpler traversal through firewalls and NAT. Its architecture reduces the number of open ports, which simplifies security management and troubleshooting. IAX2's tight integration with Asterisk systems fuels its adoption in open-source telephony projects and commercial solutions focused on scalable, efficient VoIP implementations.

Security Information

exposure of :4569

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

voice and chat averages 3.9 across 120 ports — this one sits 0.1 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Common vulnerabilities associated with IAX2 include:

  • Exposure to brute force attacks due to weak authentication mechanisms.
  • Susceptibility to denial-of-service (DoS) attacks through resource exhaustion or malformed packet injection.
  • Risk of eavesdropping or call tampering if encryption extensions are not implemented.
  • Potential NAT traversal misuse, which can create covert communication channels.

Mitigation strategies involve:

  • Implementing strong authentication credentials and account lockout policies.
  • Employing rate limiting and intrusion detection systems SIP-Friendly firewalls/wAFs.
  • Enabling encryption features such as IAX2 over TLS or VPN encapsulation to secure signaling and media.
  • Regularly updating Asterisk software and monitoring logs for malicious activity.
  • Restricting inbound connections to trusted IP addresses and implementing access control lists (ACLs).

the 8 most looked-up other ports in voice and chat — 120 ports carry that label.

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted