Port 2440: Spearway Lockers — Registered but Absent

What Port 2440 Is

Port 2440 sits in the registered ports range (1024–49151). These ports are tracked by the Internet Assigned Numbers Authority (IANA), which maintains an official registry of services that have claimed a port number.¹

IANA's registry shows port 2440 assigned to a service called Spearway Lockers (service name: spearway), registered on both TCP and UDP by a contact named Pierre Frisch.² Beyond that entry, public information about what Spearway Lockers was or whether it ever shipped in production is essentially nonexistent. The GitHub account associated with the registrant exists but sheds little light.³

This is not unusual. The registered ports range contains hundreds of assignments like this: a developer or company claimed a port number at some point, IANA recorded it, and then the service either never launched, quietly faded away, or never gained enough adoption to leave a trace in the public record.

What "Registered" Actually Means

Registered ports are different from well-known ports (0–1023). Well-known ports require elevated privileges to bind on most operating systems and carry decades of entrenched usage — SSH on 22, HTTPS on 443. Registered ports carry no such weight. Any process can bind to port 2440 without special permissions. IANA's registry is a courtesy record, not an enforcement mechanism.

If you see traffic on port 2440, it is almost certainly not Spearway Lockers. It could be:

• A developer running a local service during testing
• An application that picked this range arbitrarily
• Something that warrants investigation

How to Check What's Listening

On macOS or Linux:

# Show what process is listening on port 2440
sudo lsof -i :2440

# Or with netstat
sudo netstat -tlnp | grep 2440

# Or with ss (Linux)
sudo ss -tlnp sport = :2440

On Windows:

netstat -ano | findstr :2440
# Then look up the PID:
tasklist | findstr <PID>

If something shows up, check the process name. If it's unfamiliar, that's worth investigating.

Why These Ports Matter

The registered ports range is a commons — shared, loosely managed, easy to squat on. A malicious process can bind to port 2440 just as easily as a legitimate one. The IANA entry for Spearway Lockers provides no protection and carries no authority.

This is why firewall rules and port monitoring matter. The registered range is where legitimate obscure services live alongside forgotten assignments alongside whatever happens to need a port today. The name on the door tells you almost nothing about who's actually inside.