Port 2907: webMethods B2B — A registered port from a company that no longer exists

What Port 2907 Is

Port 2907 sits in the registered ports range (1024–49151) — the middle tier of the port numbering system, between the well-known ports below 1024 and the ephemeral ports above 49151.

Despite the task description calling it unassigned, the IANA registry tells a different story: port 2907 is officially registered as webmethods-b2b, assigned for use by WEBMETHODS B2B on both TCP and UDP, with Joseph Hines listed as the contact.¹

What webMethods B2B Was

webMethods was an enterprise integration company founded in 1996, during the era when businesses were desperately trying to talk to each other electronically. Before APIs were ubiquitous, before cloud platforms handled it automatically, companies needed dedicated middleware to exchange purchase orders, invoices, and shipping notifications across incompatible systems.

webMethods built exactly that — a B2B integration platform that let enterprises connect to trading partners using EDI, XML, and emerging web services standards. At its peak, the company was worth billions and competed with IBM WebSphere and TIBCO for the enterprise middleware market.

Port 2907 was registered during that era. Sometime in the early 2000s, someone at webMethods submitted the paperwork to IANA and claimed this number.

Then:

• 2007: Software AG acquired webMethods for $546 million
• 2024: IBM acquired Software AG's webMethods product suite

The port number has outlasted the company that claimed it, the company that acquired it, and the era of software that needed it.²

What Range This Port Belongs To

Registered ports (1024–49151) are administered by IANA. Any organization can request a port number in this range for a specific application. The assignment is bureaucratic — IANA records the name and contact, but doesn't verify that the software is still in use or that the company still exists.

This means the registry is littered with port assignments like 2907: technically claimed, practically abandoned.

Is Anything Actually Listening on Port 2907?

Almost certainly not, unless you are running legacy webMethods B2B infrastructure from the Software AG era. If you see traffic on this port on a modern system, check what it is.

To see what's listening on this port:

# Linux / macOS
sudo ss -tlnp | grep 2907
# or
sudo lsof -i :2907

# Windows
netstat -aon | findstr :2907

If something is there and you didn't put it there, investigate it.

Why Ports Like This Matter

The registered port range is a commons. IANA allocates entries but can't reclaim them from defunct companies or deprecated software. Port 2907 is a small monument to early enterprise software — registered by an ambitious company in a different era of computing, now mostly forgotten.

Most of these ports sit idle. Occasionally, malware authors notice an unmonitored registered port and exploit the assumption that "if it's registered, it must be legitimate." If your firewall rules treat all registered ports as trusted, that's a mistake.

Port 2907 itself has no known malware associations. It's just quiet.