Port 1588 is officially registered to triquest-lm, a license manager service. Both TCP and UDP protocols can use this port.1
What is triquest-lm?
Virtually nothing is known about triquest-lm today. The port is registered in IANA's official registry, but the service itself appears to be legacy software with no active documentation, no current vendor information, and no community of users discussing it online.
The "lm" suffix suggests "license manager"—a type of software that controls access to commercial applications by tracking license keys and enforcing usage limits. Many software vendors in the 1990s and early 2000s developed proprietary license management systems. Most have been replaced by modern licensing platforms or discontinued entirely.
TriQuest Technologies exists as an IT services company founded in 1997,2 but there's no evidence connecting them to license management software. The service name registered to this port may belong to a different entity, or the company may have pivoted away from this product decades ago.
The Registered Port Range
Port 1588 sits in the registered port range (1024-49151). These ports are assigned by IANA to specific services, but the assignment process was historically loose. Companies could register ports for proprietary protocols without proving widespread adoption or ongoing maintenance.
The result: a registry full of ghosts. Thousands of ports are claimed by services that:
- Never gained significant market share
- Were discontinued years or decades ago
- Exist only in legacy systems at a handful of organizations
- Were registered "just in case" and never actually used
Port 1588 appears to be one of these archaeological artifacts—a claim staked in the 1990s that persists in the official registry even though the service may be effectively dead.
What's Probably Listening on Port 1588
On most systems: nothing.
If you scan your own machine and find port 1588 open, it could be:
- Legacy license management software (unlikely unless you're running very old commercial applications)
- Malware or unauthorized services using an obscure port to avoid detection
- A modern application that happens to use this port because it's available
The obscurity of registered ports makes them attractive to malware authors. An open port for an unknown service raises fewer red flags than common ports like 80 or 443.
How to Check What's Using Port 1588
On Linux or macOS:
On Windows:
If something is listening, investigate. Unless you're knowingly running legacy license management software, port 1588 should be closed.
Why the Registry Keeps Dead Ports
IANA maintains port assignments indefinitely. Even if a service disappears, its port number remains claimed. This prevents the port from being reassigned to something else that might conflict with the handful of systems still running the old service.
It's digital archaeology. The registry is a graveyard of abandoned protocols, each one a small piece of Internet history that someone once thought important enough to formalize.
Security Considerations
Unused registered ports can be security risks:
- Attackers may use obscure ports for command-and-control traffic, betting that defenders won't notice unusual activity on ports they've never heard of
- Port scanners treat registered ports differently than random high ports, which can create blind spots in monitoring
- Legacy software using these ports is often unmaintained and vulnerable to exploits
If port 1588 is open on your network and you don't know why, close it. The odds that you're running triquest-lm legitimately are vanishingly small.
The Strangeness of the Registry
There are 48,128 ports in the registered range. IANA has assigned thousands of them to services like triquest-lm—services that may have existed for a few years at a single company, served a dozen customers, and quietly disappeared when the vendor went out of business or pivoted to something else.
And the registry remembers. Port 1588 will remain assigned to triquest-lm until someone petitions IANA to reclaim it, which almost never happens. The bureaucratic inertia of the Internet means these ports stay claimed forever, small monuments to software that no longer matters.
It's oddly beautiful in a way. The Internet doesn't forget, even when it probably should.
Frequently Asked Questions
Czy ta strona była pomocna?