Port 1926: Evolution Game Server — A Registered Ghost

Port 1926 sits in the registered port range (1024–49151) and carries an official IANA assignment: a service called Evolution Game Server, abbreviated EGS, registered for both TCP and UDP by someone named Simon Butcher.¹

That's nearly everything that's publicly known about it.

No RFC. No open-source implementation. No forum threads asking how to configure it. Searching for "Evolution Game Server" on port 1926 returns essentially nothing. The registration exists in the IANA database, quietly, with no community around it.

The Registered Port Range

When IANA assigns a port number in the registered range, it's essentially saying: "An organization asked for this, we recorded it, but we can't guarantee anyone's actually using it correctly." Unlike the well-known ports (0–1023), registered ports don't require special OS privileges to open, and IANA's enforcement is limited to maintaining the registry.

The result is a range full of registrations in various states of life:

• Services that are actively used by millions
• Services that were registered and then abandoned
• Services used internally by companies with no public presence
• Services registered speculatively, just to hold the number

Port 1926 appears to fall into one of the latter categories. The registration is real. The service's public footprint is not.

If Something Is Listening on Port 1926

If you see traffic on port 1926 on your network, it's almost certainly not Evolution Game Server. More likely candidates:

• Custom application traffic: Developers sometimes pick arbitrary port numbers in the registered range without checking IANA first
• Gaming software: Some games and game launchers use non-standard ports that happen to land here
• Malware or unauthorized tools: Attackers frequently use registered ports they assume won't be blocked

To see what's actually listening:

# On Linux/macOS
sudo ss -tlnp | grep 1926
# or
sudo lsof -i :1926

# On Windows
netstat -ano | findstr :1926

The process name in the output tells you more than any port registry ever could.

Why Ghost Registrations Exist

The IANA port registry was designed to prevent collisions — two services accidentally using the same port and interfering with each other. Registration is relatively easy to obtain, but there's no requirement to publish documentation, maintain an active user base, or prove the service ever shipped.

So the registry accumulates names. Some ports get claimed by projects that never launched. Some get registered by developers who moved on. Some are internal enterprise services that have no reason to be public.

Port 1926 is one of thousands of registered ports with more administrative existence than operational presence. It has a name, a registrant, and almost nothing else.