Port 2911 sits in the registered port range — the middle tier of the port numbering system, spanning 1024 through 49151. IANA granted these ports to specific services after an application process, distinguishing them from the well-known ports below 1024 (HTTP, SSH, SMTP) and the ephemeral ports above 49151 that operating systems hand out on demand.
The IANA registry lists port 2911 as assigned to a service called Blockade, on both TCP and UDP.1 That's where the official story ends. No RFC defines it. No documentation describes what Blockade does. No company has publicly claimed to build it. The name sits in the registry like an inscription in a dead language — present, legible, and unexplained.
What Actually Uses Port 2911
Honeywell Experion systems — distributed control systems and SCADA platforms used in oil refineries, chemical plants, and power generation facilities — generate traffic on port 2911 as part of their protocol communications.2 Tenable's network monitoring software specifically detects Honeywell Experion activity by watching for traffic on TCP ports 2909, 2910, and 2911, among others.
This is industrial infrastructure. Experion systems monitor and control physical processes: valve positions, flow rates, temperatures, pressures. The communications on port 2911 aren't web requests or file transfers — they're the nervous system of a facility that, if disrupted, can have consequences well beyond someone's screen going dark.
If you're seeing port 2911 traffic on an industrial network, it's almost certainly Experion. If you're seeing it on a general corporate or home network, it warrants a closer look.
Checking What's on Port 2911
To see if anything on your machine is listening on this port:
macOS / Linux:
Linux (alternative):
Windows:
The output will show the process ID and name. On a standard workstation or server, nothing should be listening here — if something is, it's either industrial software, a custom application, or worth investigating.
Why Unassigned-in-Practice Ports Matter
The IANA registration process isn't perfectly enforced. A port can be assigned, the product can fail or never ship, and the registry entry stays — indefinitely. Port 2911 may be the best example: officially claimed, practically unclaimed, then quietly colonized by industrial software that never bothered with official channels.
This is common throughout the registered range. The port system works partly on the honor system. Applications that want predictability register. Applications that don't care use whatever's available. The result is a registry that's accurate in aggregate but approximate in detail.
For port 2911 specifically: if IANA says Blockade, and your network says Honeywell, trust your network.
האם דף זה היה מועיל?