485
Summary
- // typical exposure
- Anomalous (rarely legitimately open) — The port carries only an obscure, undocumented legacy IANA name with no known deployed protocol or software and near-zero observed open-frequency, so any response should be treated as unexpected and investigated rather than assumed legitimate.
- // analyst note
- A responsive 485/tcp has no established legitimate use case identified in research to date; investigate as anomalous rather than assume a known service.
- // if you see it open
- No CVE referencing port 485/tcp is recorded in the NVD as of an August 2026 search, and no specific malware family is documented as using it. Port 485 appears on general lists of ports probed by internet-wide scanners such as Shodan, consistent with broad well-known-range sweeps rather than targeted exploitation interest. Because no legitimate deployed service is documented, a responsive 485/tcp should be treated as anomalous and investigated.
About port 485/tcp.
Port 485/tcp carries no active, documented protocol — only a decades-old, obscure IANA registration named powerburst ("Air Soft Power Burst") — so it has no legitimate reason to be exposed to the public internet, and a responsive instance should be treated as anomalous rather than as a known service.
IANA lists 485/tcp under the service name powerburst, description "Air Soft Power Burst," with assignee/contact recorded only as "[gary]" and a blank Reference field — no RFC or protocol specification is cited. The same name is dual-registered on 485/udp with an identical description, but no further detail distinguishes the two transports.
No public documentation, vendor page, blog post, or forum thread was found describing any current software that generates traffic on this port as of an August 2026 search. Aggregator port-list sites mirror the bare IANA entry without naming a real application. Note that RS-485 (a serial-communication electrical standard, occasionally bridged to TCP via serial-to-Ethernet gateways in industrial contexts) is unrelated to TCP port number 485 despite the numeric coincidence.
Corpus prevalence data (this site's own tooling, built from nmap-services) records an open-frequency of 0.000013 for 485/tcp and 0.000725 for 485/udp — both consistent with a port that is essentially never seen open in practice.
- IANA assignment
powerburst— "Air Soft Power Burst"; reference (blank); assignee/contact "[gary]"; dual-registered 485/tcp + 485/udp [Confirmed] — the IANA Service Name and Transport Protocol Port Number Registry (powerburst 485/tcp)- Range class
- well-known (0–1023), IANA range category "system" [Confirmed] — this site's own tooling
- Prevalence
- nmap-services open-frequency 485/tcp = 0.000013; 485/udp = 0.000725 [Confirmed] — this site's own tooling
- Related ports
- 485/udp (same IANA registration); other obscure legacy well-known assignments in the 400–599 range
Primary use
no documented active protocol; formal but unspecified legacy IANA registration with no RFC
Other/unofficial uses
none documented; RS-485 serial-to-Ethernet gateway products are a distinct, unrelated technology despite the name similarity [Likely]
Security implications
no CVE or malware family documented for this port as of an August 2026 search; appears only on generic internet-wide scanner port lists
Typically seen on
no known typical deployment; an open instance is an anomaly worth investigating [Unknown]
- Analyst note
- A responsive 485/tcp has no established legitimate use case identified in research to date; investigate as anomalous rather than assume a known service.
About port 485/udp.
Port 485/udp carries no widely deployed modern service. It is formally registered with IANA under the name powerburst, but no credible evidence of real-world use was found, so it should not be expected on the public internet and any observed traffic on it is worth investigating rather than assumed legitimate.
IANA's Service Name and Transport Protocol Port Number Registry lists port 485 as a dual TCP/UDP registration for powerburst, described only as "Air Soft Power Burst," with registrant contact [gary] and no RFC or other reference cited. The Registration Date, Modification Date, and Reference fields are all blank in the registry entry.
Scan-derived open-frequency data in the project's port corpus puts 485/udp at roughly 0.0725% and 485/tcp at roughly 0.0013%, both far below the levels seen for actively used services — consistent with a registration that was never broadly implemented. An August 2026 web search found no vendor documentation, forum threads, or product references tying real software to this UDP port, and the name "Air Soft Power Burst" does not correspond to any identified airsoft, gaming, or industrial product with a documented network component.
The numeral "485" online is dominated by the unrelated RS-485 serial communication standard used in industrial automation and Modbus-over-serial-to-Ethernet converters. None of the RS-485-to-Ethernet product documentation reviewed cited UDP or TCP port 485 as an actual network port number, so this is a naming coincidence rather than evidence of real traffic on the port.
- IANA assignment
powerburst— "Air Soft Power Burst"; reference (blank); assignee [gary]; dual-registered 485/tcp + 485/udp [Confirmed] — the IANA Service Name and Transport Protocol Port Number Registry powerburst 485/udp- Range class
- well-known (0–1023) [Confirmed]
- Prevalence
- port-data.json open-frequency 485/udp ≈ 0.000725 (~0.0725%), 485/tcp ≈ 0.000013 (~0.0013%) [Confirmed] — this site's own tooling
- Related ports
- none substantively related in official documentation; note that an unverified AI-generated search summary incorrectly conflated this port with 475/tcp,udp (hasp-udp/tcpnethaspsrv), which is not supported by primary sources for 485 [Unknown]
Primary use
no maintained specification or widely deployed protocol identified; IANA registration only
Other/unofficial uses
none credibly identified; "485" online is dominated by the unrelated RS-485 serial standard, a naming coincidence not tied to this port [Unknown]
Security implications
no malware/trojan association is confirmed; aggregator auditmypc.com lists pages for this port but its live verdict text could not be independently verified as of August 2026
Typically seen on
no known legitimate hosts identified as of an August 2026 search; anomalous if observed [Unknown]
- Analyst note
- an open port 485/udp is statistically rare and has no known legitimate contemporary use; treat as anomalous and investigate rather than assume benign.
Service assignments.
| Name | Protocol | Description | Open frequency |
|---|---|---|---|
| powerburst | UDP | Air Soft Power Burst | 0.07% |
| powerburst | TCP | Air Soft Power Burst | 0.00% |
Service assignments from the IANA Service Name and Transport Protocol Port Number Registry, with open-frequency data from nmap-services.