459
Summary
- // typical exposure
- Anomalous (rarely legitimately open) — The port has zero measured open-frequency, no documented legitimate public-facing use, and no authoritative protocol specification, so an open 459/tcp should be treated as unusual and investigated rather than expected.
- // analyst note
- An open 459/tcp has zero measured prevalence and no documented legitimate public-facing use; treat as anomalous and investigate the context rather than assuming a known service.
- // if you see it open
- No CVE, exploit, or malware association found as of an August 2026 search. The IANA registry row carries no Reference document, so no authoritative spec exists to assess authentication or transport security. Measured open-frequency is 0, consistent with a port that is essentially never legitimately open.
About port 459.
Port 459/tcp carries ampr-rcmd, an IANA-registered System Port with no published protocol specification; it is not a documented public-internet service, and open-frequency sampling has never observed it open, so it should be treated as internal/anomalous rather than something that belongs facing the public internet.
IANA lists 459/tcp (and the identical 459/udp) as ampr-rcmd, assigned to Rob Janssen, with both the Reference and Registration Date columns left blank in the registry — the assignment exists, but IANA does not point to any RFC or spec that defines the protocol's wire format or behavior.
Secondary sources loosely associate the name with AMPRNet, the amateur-packet-radio network that operates the 44.0.0.0/8 address space, reading "ampr-rcmd" as an amateur-radio remote-command service. This is a plausible naming inference rather than a citable technical fact, since IANA's own record carries no reference document to confirm it.
No CVE, exploit, or malware association for port 459 was found as of an August 2026 search, and no forum, vendor-doc, or blog post naming a specific client or daemon observed on 459/tcp turned up either — this gap is reported as Unknown rather than guessed.
- IANA assignment
ampr-rcmd— description "ampr-rcmd"; assignee Rob Janssen; Reference column blank; Registration Date blank; dual-registered 459/tcp + 459/udp [Confirmed] — the IANA Service Name and Transport Protocol Port Number Registry ampr-rcmd 459/tcp- Range class
- System Port (well-known, 0–1023) [Confirmed] — the IANA Service Name and Transport Protocol Port Number Registry ampr-rcmd 459/tcp
- Prevalence
- nmap-services open-frequency 459/tcp = 0 (sampled, not observed open); 459/udp ≈ 0.000362 [Confirmed] — this site's own tooling (port 459)
- Related ports
- 459/udp (identical IANA registration, same assignee) [Confirmed] — the IANA Service Name and Transport Protocol Port Number Registry ampr-rcmd 459/udp
Primary use
registered name ampr-rcmd, no published protocol specification; loosely inferred to relate to AMPRNet (amateur packet radio network, 44.0.0.0/8) remote-command functionality
Other/unofficial uses
none confirmed
Security implications
no CVE or malware association found; no authoritative protocol reference exists to assess transport security
Typically seen on
not established; no community sightings of a specific application surfaced
- Analyst note
- An open 459/tcp has zero measured prevalence and no documented legitimate public-facing use; treat as anomalous and investigate the context rather than assuming a known service.
Service assignments.
| Name | Protocol | Description | Open frequency |
|---|---|---|---|
| ampr-rcmd | UDP | — | 0.04% |
| ampr-rcmd | TCP | — | 0.00% |
Service assignments from the IANA Service Name and Transport Protocol Port Number Registry, with open-frequency data from nmap-services.