Port 3540Microsoft Peer Name Resolution Protocol (PNRP)

PNRP lets Windows peer-to-peer applications publish and resolve peer names to network endpoints, typically over UDP 3540.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
2/10

safe

lookups
0

rank 993 of 4,751 · top 21%

also known as pnrp-port, PNRP, MS-PNRP

Technical Details

what runs on :3540

PNRP is a decentralized name-resolution protocol: peers publish peer names and endpoint information into a PNRP cloud, and other peers query that cloud to resolve names to network endpoints. The IANA assignment lists both TCP and UDP; normal Windows PNRP traffic is commonly UDP on port 3540 and uses IPv6, with tunneling such as Teredo possible in some configurations. PNRP is not DNS and does not encrypt traffic by default; secure peer names can use cryptographic identities and signatures to authenticate name records.

Security Information

exposure of :3540

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

network services averages 2.7 across 1,410 ports — this one sits 0.7 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

This is generally a legacy or feature-dependent Windows service, not a routine public server. If PNRP is not needed, disable the feature or block unsolicited inbound traffic; otherwise limit access to the networks where peer discovery is intended. PNRP does not provide transport encryption, and an exposed listener can receive peer-protocol traffic, but this port is not ordinarily associated with remote administration or a widely deployed internet-facing service.

the 8 most looked-up other ports in network services — 1,410 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted