Port 1438: Eicon Security Agent — A ghost from the ISDN era

Port 1438 sits in the registered ports range (1024-49151), officially assigned to a service called "Eicon Security Agent/Server." If you've never heard of it, that's because it's been obsolete for years.

What Was Eicon?

Eicon Networks Corporation was a telecommunications company founded in Montreal in 1984¹. They built ISDN adapters, telephony boards, and connectivity products during the era when businesses were moving from analog phone lines to digital telecommunications.

The "Eicon Security Agent/Server" that port 1438 was registered for was part of this telecommunications infrastructure. The exact details of what the service did are lost to time—the software is gone, the documentation scattered, the technology superseded.

In 2006, Eicon was acquired and merged into Dialogic Corporation¹. The products were discontinued. The port registration remained.

The Registered Ports Range

Port 1438 belongs to the registered ports range (1024-49151). These ports are assigned by IANA to specific services upon application. Unlike well-known ports (0-1023), which are reserved for fundamental Internet protocols, registered ports are available to any organization that requests one.

The result is a registry full of ports like 1438—officially assigned to services that no longer exist, or never saw widespread use, or were replaced by newer technologies.

Is Anything Using Port 1438 Today?

Probably not, but you can check:

On Linux/macOS:

sudo lsof -i :1438
# or
sudo netstat -tuln | grep 1438

On Windows:

netstat -ano | findstr :1438

If something is listening on port 1438, it's either:

• Legacy Eicon software (extremely unlikely)
• Custom software configured to use this port
• Malware repurposing an obscure port

The third possibility is why security scanners flag unusual activity on registered ports—if a port has no reason to be open, it shouldn't be.

Why Keep Dead Ports in the Registry?

Because removing them creates problems. If IANA deleted port 1438's assignment, someone else could register it. Old systems still running Eicon software would suddenly conflict with whatever new service claimed the port.

So the registry keeps these ghost ports. They serve as placeholders, preventing collisions with the past. Most of the registered ports range is like this—thousands of numbers assigned to services that peaked in the 1990s and quietly faded.

What This Port Tells Us

Port 1438 is a reminder that the Internet's infrastructure is archaeological. Every protocol, every port assignment, every RFC carries the history of what someone once thought was important enough to standardize.

Eicon's engineers requested port 1438 because their software needed a way for clients to find their security service. They filled out IANA's application form. The port was granted. The software shipped. Businesses installed it.

And then the technology moved on. ISDN gave way to VoIP. Eicon was acquired. The software was discontinued. But port 1438 remains in the registry, a marker of what once was.

This is true for thousands of ports. The registered range is a museum of obsolete services, each one a snapshot of networking history.