Port 2695: VSPREAD — A Registered Ghost

What Port 2695 Is

Port 2695 sits in the registered port range — the band of ports from 1024 to 49151 that IANA manages on a first-come, first-served basis. Unlike the well-known ports below 1024 (which require root privileges to bind on Unix systems and carry protocols the whole Internet depends on), registered ports are lower-stakes claims. An organization identifies itself, names a service, and IANA records the reservation.

Port 2695 was registered to a service called VSPREAD, attributed to Sumitake Kobayashi at Fujitsu's research division. The contact email — kobayashi@np.lps.cs.fujitsu.co.jp — points to Fujitsu's Network Protocol Laboratory. Both TCP and UDP are listed.

That is the full extent of the public record.¹

The Silence of VSPREAD

No RFC documents this protocol. No Fujitsu product manual references it. No open-source project implements it. No security scanner flags it. The name VSPREAD suggests something about propagation or distribution — possibly an internal messaging system, a replication protocol, or a distributed computing tool from Fujitsu's research labs in the 1990s or early 2000s — but that is speculation.

This is not unusual. The registered port range contains dozens of registrations like this: a real person, a real organization, a real internal project that never became a public protocol. The registration served its purpose — carving out space so no one else would accidentally collide with it — and then the project either stayed internal, was abandoned, or got folded into something else.

VSPREAD is a ghost registration. The port is claimed. The protocol is gone.

What's Actually on Port 2695

If you see traffic or a listening process on port 2695, it is not VSPREAD. It is something else — a custom application, a development server, or potentially unwanted software that chose an obscure registered port precisely because nothing else uses it.

To check what is actually listening:

On Linux or macOS:

# Show the process bound to port 2695
sudo ss -tlnp sport = :2695
# or
sudo lsof -i :2695

On Windows:

netstat -ano | findstr :2695
# Then look up the PID:
tasklist | findstr <PID>

If something is listening and you did not put it there, that is worth investigating.

Why Ghost Registrations Exist

The registered port range was designed with optimism: organizations would register ports, document protocols, and the registry would serve as a useful map of what runs where. In practice, many registrations represent internal tools that never went public, products that were discontinued, or protocols that were superseded before they shipped.

The registry does not expire registrations. Port 2695 will remain listed as VSPREAD until someone petitions IANA to reclaim it. In the meantime, it is exactly what most of the registered range looks like up close: a name, a contact, and silence.