Port 1908: Dawn — A registered port with a forgotten name

What Port 1908 Is

Port 1908 sits in the registered ports range (1024–49151). These ports are managed by IANA, and anyone can apply to claim one for a service. Having a registered port means someone filed the paperwork — it does not mean the port carries important traffic or that the service still exists.

Port 1908 carries an IANA entry with the service name "dawn". There is no RFC associated with it. There is no published documentation explaining what "dawn" is or was. The entry exists, the name floats in the registry, and that's where the trail ends.¹

Known Unofficial Uses

The most concrete documented use of port 1908 is Monopoly Tycoon, a construction and management simulation game developed by Deep Red Games and published by Infogrames in 2001. The game used this port for LAN and Internet multiplayer, allowing up to six players to compete in building property empires. The game is now considered abandonware.²

No other significant unofficial uses are documented.

Security Notes

Some older port-scanning databases flag port 1908 as having been associated with malicious activity in the past. This is common for many ports in the registered range — malware sometimes squats on obscure, low-traffic ports to avoid detection. If you see unexpected traffic on port 1908 and you're not running Monopoly Tycoon, it's worth investigating.³

How to Check What's Using This Port

On Linux or macOS:

sudo lsof -i :1908
sudo ss -tlnp sport = :1908

On Windows:

netstat -ano | findstr :1908

Match the PID from netstat against Task Manager to identify the process.

Why Unassigned and Ghost Ports Matter

The registered port range contains thousands of entries like "dawn" — names without documentation, services that were never widely deployed, or registrations from companies that no longer exist. They matter for two reasons.

First, firewall rules often need to account for them. An administrator blocking a port range might unknowingly block a legitimate application, or unknowingly allow something unexpected.

Second, they're a reminder that the port registry is a living document, not a perfect map. The IANA list reflects what people have claimed, not what people are actually using. Real traffic on port 1908 today is more likely to be a game session from 2003 or a misconfigured service than anything "dawn" ever intended.