Port 3528JBoss IIOP

JBoss application servers use this port for CORBA IIOP, allowing remote clients to invoke configured enterprise objects.

inNetwork Services

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 2/10
lookups: 0

also known as CORBA IIOP

Technical Details

what runs on :3528

JBoss uses port 3528 for CORBA's Internet Inter-ORB Protocol (IIOP) when the server's IIOP/ORB service is enabled. IIOP carries GIOP messages over TCP; those messages use a binary header and CDR-encoded request and reply data, with object references (IORs) identifying remote objects. Although the IANA assignment lists both TCP and UDP, a normal JBoss IIOP listener is TCP-based; UDP is not generally expected. Some JBoss configurations use port 3529 for SSL-protected IIOP.

Security Information

exposure of :3528

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

network services averages 2.7 across 1,404 ports — this one sits 0.7 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

IIOP is not encrypted by default, and the protocol itself does not guarantee that remote object calls require authentication; protections depend on JBoss and application configuration. An exposed listener can let clients reach whatever CORBA objects the server makes available, so disable IIOP if unused and restrict access or configure SSL and suitable authorization if needed. The supplied scan data reports no open observations, consistent with this being an uncommon internet-facing service.

Record

iana registry entry

port: :3528
service: JBoss IIOP
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 2/10safe
category: Network Services
usage: In JBoss deployments with IIOP enabled, this is the CORBA object-request endpoint for clients connecting to server-hosted objects. It is a specialized middleware interface, not a general-purpose web or management port.
lookups: 0rank 993
added: 2026-09-30
updated: 2026-09-30
references: IANA service name registry — port 3528

Something wrong?

This record is maintained by the engineers who use port 3528. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-30.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,404 in network services →

the 8 most looked-up other ports in network services — 1,404 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :3528JBoss IIOP

Technical Details

Security Information

Related Ports

Port 3528JBoss IIOP