Port 2930: AMX-WebLinx — The AV control room's web interface

What Port 2930 Is

Port 2930 is registered with IANA under two names that refer to the same thing: AMX-WEBLINX and PANJA-WEBLINX.¹ Both TCP and UDP are assigned. The duplicate entry exists because the company changed its name — and both names made it into the registry.

This port belongs to the registered ports range (1024–49151). These ports are assigned by IANA upon application, which means someone at AMX filled out the paperwork and this port was formally reserved for their use. It is not unassigned — it is obscure.

What AMX WebLinx Was

AMX (formerly Panja) built the hardware and software that controls AV equipment in commercial spaces: conference room displays, auditorium lighting, hotel room systems, boardroom cameras. Their flagship product line, NetLinx, was a series of programmable controllers that could orchestrate all of it from a central processor.

WebLinx was AMX's web-based interface layer — a way to configure, monitor, and interact with NetLinx controllers over a network without proprietary client software. Port 2930 is where that web interface listened.²

Panja was a Norwegian AV control company that AMX acquired in the early 2000s. AMX was itself later acquired by Harman International in 2014.³ The Panja name survived only in IANA's registry and the occasional dusty controller in a back equipment room.

Who Encounters This Port

Almost no one — unless you work in AV integration, building automation, or corporate IT for large venues. If you see port 2930 open on a device in a scan, you're almost certainly looking at an AMX NetLinx controller, possibly decades old, still running in a wall panel somewhere.

These devices were often installed and forgotten. They may be running outdated firmware with no recent security patches.

Security Considerations

Any web interface running on aging embedded hardware is worth scrutinizing. AMX NetLinx controllers have had documented vulnerabilities over the years, including hardcoded credentials and unencrypted web interfaces.⁴ If you find port 2930 open on a network scan and it's unexpected, treat it like any other unrecognized web service: don't assume it's harmless because you don't recognize the name.

How to Check What's Using This Port

On Linux or macOS:

# See what process has port 2930 open
sudo lsof -i :2930

# Or with ss (Linux):
sudo ss -tlnp | grep 2930

On Windows:

netstat -ano | findstr :2930

With nmap (to check a remote host):

nmap -sV -p 2930 <target-ip>

If port 2930 is open on a remote device and responds to HTTP, try connecting in a browser. An AMX WebLinx interface typically presents a login page or status dashboard. Default credentials on older AMX hardware were notoriously weak — often administrator / password — and many units were never changed.