What Port 2994 Is
Port 2994 is registered with IANA under the name veritas-vis2, assigned to Veritas Technologies for use by their VIS2 (Volume Information Services) component — part of the Veritas Storage Foundation and related enterprise data management products.1
In practical terms: if you see port 2994 open on a machine, it's almost certainly running some component of Veritas storage management software, or something is misconfigured, or someone is scanning you.
The Registered Port Range
Port 2994 sits in the registered port range (1024–49151), also called the user ports. IANA coordinates assignments in this range, but registration is voluntary — any organization can request a port number for their software.
The registered range is enormous. Of its ~48,000 ports, thousands are assigned to software that most engineers have never heard of. Many assignments are from the 1990s and early 2000s, when enterprise software vendors routinely registered ports for internal communication between their software components. Most of those products have since been deprecated, acquired, or replaced. The port registrations remain.2
Port 2994 is one of those. Veritas was a major enterprise storage company — their products managed backup, clustering, and volume management for large organizations running Solaris, AIX, HP-UX, and Windows servers. VIS2 was an internal coordination service, not something users interacted with directly.
Who Actually Runs This
Legacy enterprise environments running older Veritas Storage Foundation or Veritas Cluster Server installations. If you're operating one of these, your firewall rules probably already account for it. If you're not, you almost certainly have nothing listening on this port.
Someone Is Watching
SANS Internet Storm Center logs active scanning of port 2994. Multiple IP addresses probe it daily — typical behavior for automated scanners that sweep the entire port space looking for open services to fingerprint or exploit.3
This is normal background noise of the Internet. Most scanning is automated and indiscriminate. The scanners don't know (or care) that port 2994 is a legacy Veritas service — they're just checking if anything answers.
How to Check What's Listening
If you're wondering whether anything on your machine has claimed this port:
Linux/macOS:
Windows:
If nothing comes back, nothing is listening. That's the expected result for most systems.
Cette page vous a-t-elle été utile ?