Port 3588: Sentinel Server — A Registered Port Nobody Calls Home

What This Port Is

Port 3588 sits in the registered port range (1024–49151). These ports are assigned by the Internet Assigned Numbers Authority (IANA) to specific services and applications — as opposed to the well-known ports below 1024 (HTTP, SSH, DNS) or the ephemeral ports above 49151 that operating systems hand out temporarily for outgoing connections.

IANA registered port 3588 in August 2002 for Sentinel Server, on both TCP and UDP.¹

The Sentinel Story

Sentinel was a software license management system made by Rainbow Technologies, a company that built hardware dongles and license enforcement tools for commercial software vendors. If you ran engineering software, CAD tools, or scientific applications in the late 1990s and early 2000s, you probably encountered a Sentinel key at some point — a USB or parallel-port dongle that software checked before it would run.

The Sentinel Server component handled network licensing: instead of one dongle per machine, a server held the licenses and clients checked out seats over the network. Port 3588 was designated for that server-to-client communication.

Rainbow Technologies was acquired by SafeNet in 2004. SafeNet was acquired by Gemalto in 2015. Gemalto was acquired by Thales in 2019. The Sentinel product line survived all three acquisitions — but it evolved. Modern Sentinel products use different ports:

• Sentinel HASP / LDK: port 1947 (TCP/UDP)²
• Sentinel RMS: port 5093 (UDP)³

Port 3588 is not part of the current Sentinel architecture. The IANA registration from 2002 remains on the books regardless.

If You See Port 3588 Open

If you encounter port 3588 listening on a machine today, it's most likely:

• Old Sentinel software — a legacy installation from a vendor who hasn't updated their license management stack
• Something unrelated — a custom application that chose this port because it appeared unoccupied

To find out what's actually using it:

On Linux/macOS:

sudo ss -tlnp | grep 3588
# or
sudo lsof -i :3588

On Windows:

netstat -ano | findstr :3588
# Then look up the PID:
tasklist | findstr <PID>

Why Unassigned (or Dormant) Ports Matter

The registered port range exists so applications can pick a consistent, known port that won't collide with other services. But IANA registrations have no expiration date. A port can be claimed by a product version that's been superseded, by a company that's been acquired, by software that stopped shipping years ago — and the registry entry remains.

This creates a category of ports that are technically registered but practically vacant. Port 3588 is one of them. Nothing's wrong with using it for a custom application — just be aware that some very old Sentinel installations might already be sitting there.