If your firewall/router is able to take pcaps or logs for incoming traffic, I would try to see if the traffic to 5060 is visible in your main firewall.
If yes, then it has to be something on the PBX side.
AFAIK canyouseeme can only tests TCP ports, unless you open 5060 TCP you won’t be able to test that.
Is that a physical phone or softphone on another network ?
or a softphone on a cell phone ?
In FreePBX, look to see in the firewall under “Intrusion Detection” If you accidentally blacklisted yourself. I have done this MANY times where I set up the extension on FreePBX, forget to hit apply changes, set up the remote extension and make it go, before the extension is actually active on FreePBX, thus resulting in banning myself instantly. Have to then remove the remote IP address from intrusion detection.