Port 6326Double-Take Virtual Recovery Assistant

TCP/6326 is assigned to Carbonite's Double-Take Virtual Recovery Assistant.

transport: tcp
in transit: cleartext
assignment: official
risk: 1/10
lookups: 0

also known as dt-vra

Technical Details

what runs on :6326

Double-Take Virtual Recovery Assistant is registered on port :6326 over tcp to Carbonite Inc, assigned October 2012. We don't have a technical write-up for it beyond the IANA registry entry.

In nmap's internet-wide scan data this port is never observed open, so if it's open on your network it's more likely a custom or misconfigured service than the registered one.

find what's listening on :6326

this machine

# linux
sudo ss -tlpn 'sport = :6326'

# macos / bsd
sudo lsof -nP -i :6326

# windows (then: tasklist /FI "PID eq <pid>")
netstat -ano | findstr :6326

another host

nmap -sV -p T:6326 <host>

run it? the handshake, the implementations you meet in the wild and the flags that matter come from the engineers who do.

add technical details

Security Information

exposure of :6326

risk score

1/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

virtualization averages 3.5 across 42 ports — this one sits 2.5 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

no security notes recorded for :6326 yet

known exploits, hardening advice, what a compromise looks like — suggest an edit if you know its exposure.

Record

iana registry entry

port: :6326
service: Double-Take Virtual Recovery Assistant
transport: TCP
encryption: cleartext
assignment: iana registered
risk: 1/10safe
category: Virtualization
usage: The IANA assignment identifies this as the Double-Take Virtual Recovery Assistant, a Carbonite service. Its protocol behavior and typical deployment are not established here.
lookups: 0rank 993
added: 2026-10-10
updated: 2026-10-10
references: IANA service name registry — port 6326

Something wrong?

This record is maintained by the engineers who use port 6326. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-10.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 42 in virtualization →

the 8 most looked-up other ports in virtualization — 42 ports carry that label.

port	service	proto	category	risk	views
:902	VMware vSphere Management	TCP	Remote Access	caution	28.7k
:902	VMware Console UDP	UDP	Remote Access	caution	28.0k
:1200	SCOL Name Service	TCP	Network Services	caution	15.5k
:2598	Citrix ICA Session Reliability	TCP	Remote Access	caution	11.0k
:4610	QualiSystems TestShell	TCP	Network Services	caution	10.8k
:657	IBM RMC	TCPUDP	Network Services	caution	10.0k
:8222	VMware Server UI (Insecure)		Web Services	caution	8.2k
:8333	VMware Server UI (Secure)		Web Services	caution	7.9k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :6326Double-Take Virtual Recovery Assistant

Technical Details

Security Information

Related Ports

Port 6326Double-Take Virtual Recovery Assistant