280

Port 280 is registered with IANA — on both TCP and UDP — as http-mgmt, described simply as "http-mgmt" in the current IANA Service Name and Transport Protocol Port Number Registry, with assignee and contact both listed as [Adrian_Pell]. The Registration Date, Modification Date, Reference, Service Code, and Assignment Notes columns are all blank in the registry for this entry, so IANA records no supporting RFC, no assignment date, and no further detail beyond the bare service name; nothing here is filled in with a guessed value. The name itself is generic — "http-mgmt" reads as a placeholder for "an HTTP-based management interface" rather than a documented protocol, and no vendor, appliance, or open-source project was found in this research that is consistently associated with running its admin UI on 280/tcp specifically. Internet-wide scan data (Nmap's nmap-services reference frequencies) shows the port is rarely seen open — well under 1% of scanned hosts (roughly 0.18% on tcp, 0.04% on udp) — and no CVE or malware/backdoor association turned up in CVE.org/NVD searches or on standard bad-ports reference lists checked. Practically, an analyst who sees 280/tcp open should treat it as an unidentified or vendor-specific HTTP admin interface worth fingerprinting via a direct HTTP request or banner grab rather than assuming a known product, since the registry itself supplies no distinguishing detail beyond the name.

IANA assignment

http-mgmt — description "http-mgmt"; assignee/contact [Adrian_Pell]; dual-registered 280/tcp + 280/udp [Confirmed] — IANA service-names-port-numbers registry (CSV/XML)

IANA reference/RFC

blank in registry — no RFC cited [Confirmed] — IANA CSV

Registration/modification date

blank in registry — not recorded, not fabricated [Confirmed] — IANA CSV

Range class

well-known (0–1023) [Confirmed]

Prevalence

nmap-services reference-scan frequency ≈0.001844 (280/tcp) and ≈0.000379 (280/udp), i.e. roughly 0.18%/0.04% of scanned hosts — uncommon but not unheard of [Confirmed] — nmap-services (live nmap SVN source)

Related ports

no other IANA-registered port sharing the http-mgmt name or an adjacent number was identified in this research; conceptually related to other HTTP-based admin interfaces (e.g. 80, 443, 8080, 8443) by function only, not by registry linkage [Unknown]

Primary use

generic HTTP-based management/administration interface per the IANA service name; no distinct protocol specification or standards document found — appears to function as a placeholder registration rather than a documented protocol

Common software/vendor

none identified in this research that is consistently documented as running its admin interface on this specific port [Unknown]

Malware/trojan association

not present on standard bad-ports/trojan-port reference lists checked (Kessler's Bad Ports list; chebucto trojan-port table)

CVE history

no CVE or NVD entry found specific to port 280 or the http-mgmt service; absence of search results is not proof of absence [Unknown] — CVE.org/NVD search

Port 280/udp is registered with IANA under the service name http-mgmt, described simply as "http-mgmt," with assignee and contact both listed as Adrian Pell. The registry carries no Registration Date, no Modification Date, and no Reference (RFC/spec) field for this entry — all three are genuinely blank in the cached IANA registry rather than omitted, so they are reported here as null instead of an invented placeholder. The assignment is dual-registered: 280/tcp carries the identical service name, description, assignee, and contact, which is a common IANA pattern for a service intended to work over either transport. Beyond the bare registry label, no formal specification document defines what "http-mgmt" actually does on the wire — the name strongly implies an HTTP-based management interface, of the kind vendors put on routers, switches, or other network appliances for configuration access, but IANA's registration doesn't tie it to a specific protocol document, product, or vendor. Nmap's nmap-services frequency data shows 280/udp open in about 0.038% of scanned hosts (0.000379), noticeably rarer than 280/tcp's 0.184% (0.001844), consistent with an HTTP-style management service being far more likely to run over TCP than UDP in practice. No dedicated malware or trojan association was found in the sources checked, though the one source offering that claim (AuditMyPC) carries a general accuracy disclaimer rather than being an authoritative negative.

IANA assignment

http-mgmt — description "http-mgmt"; assignee/contact [Adrian_Pell]; Reference field blank (no RFC cited) [Confirmed] — the IANA Service Name and Transport Protocol Port Number Registry (cached IANA Service Names and Port Numbers Registry), row for 280/udp

Registration/Modification dates

blank in the registry — reported as Unknown/null, not fabricated [Confirmed] — same IANA registry row

Dual registration

280/tcp carries an identical service name/description/assignee/contact [Confirmed] — same IANA registry, 280/tcp row

Range class

well-known (0–1023) [Confirmed]

Prevalence

nmap-services open-frequency 280/udp ≈ 0.000379 (~0.04%), versus 280/tcp ≈ 0.001844 (~0.18%) — udp side rarely observed open relative to tcp [Confirmed] — https://raw.githubusercontent.com/nmap/nmap/master/nmap-services

Assignment date

not present in the fetched IANA data for this entry [Unknown]

Primary use

generic label for an HTTP-based device management interface (e.g., routers/switches); no accompanying spec document defines exact protocol behavior [Likely] — https://www.speedguide.net/port.php?port=280, http://ports.my-addr.com/tcp_port-udp_port-application-and-description.php?port=280

Common software/vendor

no source found ties this port to a specific named product or vendor implementation [Unknown]

Malware/trojan association

no known association on record per AuditMyPC's port database ("Virus/Trojan: No"), though that source disclaims guaranteed accuracy — treat as "no report found," not a definitive clean bill