Port 1352 services

2 entries are registered on port 135. It is a well-known port (0–1023) — assignments here are IANA's, and a service found on one is usually the service that was assigned it.

entries
2

services registered on this number

transport
tcp · udp

2 transports in use

in transit
0/2

entries encrypted on the wire

worst risk
4/10

1 of 2 iana-registered

Services on this port

ranked by lookups
portservicerisk
:135Microsoft EPMAPcaution
:135DCE/RPC Endpoint Mappercaution

01Microsoft EPMAPtcp · udp · unofficial · risk 4/10

Microsoft Endpoint Mapper (EPMAP), commonly operating on port 135, serves as the RPC (Remote Procedure Call) locator service. It allows clients to identify network services available on a Windows host, facilitating communication with components like DHCP, DNS, WINS, and Distributed Component Object Model (DCOM). By mapping UUIDs to network addresses, EPMAP acts as a directory, enabling dynamic discovery of RPC services essential for remote management and inter-process communication in Windows environments.

port 135 as Microsoft EPMAP

02DCE/RPC Endpoint Mappertcp · udp · iana-registered · risk 4/10

Port 135 is primarily used by Microsoft RPC Endpoint Mapper, a crucial function for locating network services used by Windows systems and DCE/RPC frameworks. It facilitates communication between clients and available services by helping clients determine what dynamic ports specific RPC services are listening on.

port 135 as DCE/RPC Endpoint Mapper

Which one is on your host

ask the machine, not the registry

The registry says what 135 is registered to. What is listening on it right now is decided by the host, and only the host can be asked. Each of these prints the process behind the socket.

linux
ss -ltnp | grep ':135\b'
macos
lsof -nP -iTCP:135 -sTCP:LISTEN
windows
netstat -ano | findstr :135

On Linux and Windows the process name comes back with the socket; on macOS lsof needs sudo to name a process that isn't yours. Match what it prints against the 2 entries above.

A port number is not a service. Anything may listen on 135 — what you actually met is decided by the host, not the registry. If a service is missing here, it belongs in the registry.

contribute an entry