Port 3540Microsoft Peer Name Resolution Protocol (PNRP)
PNRP lets Windows peer-to-peer applications publish and resolve peer names to network endpoints, typically over UDP 3540.
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 2/10
- lookups
- 0
2 transports registered
payload readable on path
registered with iana
safe
rank 993 of 4,751 · top 21%
also known as pnrp-port, PNRP, MS-PNRP
Technical Details
what runs on :3540PNRP is a decentralized name-resolution protocol: peers publish peer names and endpoint information into a PNRP cloud, and other peers query that cloud to resolve names to network endpoints. The IANA assignment lists both TCP and UDP; normal Windows PNRP traffic is commonly UDP on port 3540 and uses IPv6, with tunneling such as Teredo possible in some configurations. PNRP is not DNS and does not encrypt traffic by default; secure peer names can use cryptographic identities and signatures to authenticate name records.
Security Information
exposure of :3540risk score
2/ 10safe
routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.
network services averages 2.7 across 1,410 ports — this one sits 0.7 below.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
This is generally a legacy or feature-dependent Windows service, not a routine public server. If PNRP is not needed, disable the feature or block unsolicited inbound traffic; otherwise limit access to the networks where peer discovery is intended. PNRP does not provide transport encryption, and an exposed listener can receive peer-protocol traffic, but this port is not ordinarily associated with remote administration or a widely deployed internet-facing service.
Related Ports
the 8 most looked-up other ports in network services — 1,410 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :6543 | Jetnet | UDP | Network Services | caution | 65.3k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3233 | WhiskerControl Protocol | TCPUDP | Network Services | caution | 61.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Tatsoft Default HTTP Proxy | TCP | Web Services | caution | 46.8k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted