TCP Port 135

Common Use

Microsoft Remote Procedure Call (RPC) service.

Inbound Scan

Currently inbound scans are likely the Nachi or MSBlast worms.

Outbound Scan

Outbound scans if occurring in volume should be considered an indication of a possible worm infection on the source computer and should be investigated.

Additional Information

PortPeeker Capture of MSBlast Scan and Infection Attempt

Nachi the new champion bad boy

Microsoft - What You Should Know About the Nachi Worm

What You Should Know About the Blaster Worm and Its Variants

Microsoft Windows RPCSS Service contains heap overflow in DCOM request filename handling

Page last updated on February 09, 2004