Internet-Security raven logo internet-security.com

TCP 5908

ProtocolTCP
Port5908
Labels

Synopsis

  • TCP 5908 is commonly used by VNC servers as the port for display :8 (VNC/RFB uses 5900 + display-number).
  • Real-world VNC implementations such as RealVNC, TightVNC, TigerVNC, UltraVNC, and x11vnc will listen on 5908 when started for display :8.
  • QEMU/KVM exposes a VM console over VNC with the “-vnc :8” option, which binds to TCP 5908.
  • VMware ESXi/Workstation can be configured to expose a VM’s console over VNC on a chosen 59xx port; 5908 is a typical assignment when using that feature.
  • OpenStack/libvirt per-instance VNC servers bind to 5900+N; before web proxying (noVNC), an instance may be served on 5908.
  • Linux hosts (e.g., Raspberry Pi) running TightVNCServer or TigerVNC often use 5908 for an additional session (display :8).
  • Security: exposed VNC services on 5900–5999, including 5908, are frequently scanned and brute-forced by attackers due to weak authentication and lack of encryption in many deployments.

Observed activity

Last 30 days Detailed chart

More information