{
  "port": 1035,
  "protocol": "both",
  "service": "mxxrlogin (MX-XR RPC)",
  "oneLiner": "Registered as \"MX-XR RPC\" to Valassis — a vendor-private RPC service with no public specification.",
  "whatItIs": "IANA assigns 1035 to `mxxrlogin`, described as \"MX-XR RPC\", registered in 2003 by Valassis and last modified in 2015. It is a proprietary remote-procedure-call service; no protocol document, client, or server is publicly available, so the registration is essentially all there is to know. As with its neighbours, an open 1035 on a scan is far more likely to be a dynamically assigned Windows RPC endpoint from the old 1025-5000 range than the registered service.",
  "exposure": {
    "verdict": "careful",
    "note": "A login-bearing RPC service with no public specification cannot be audited from outside — keep anything answering here on a private network until you know what it is."
  },
  "checkCommand": "nmap -Pn -sV -p 1035 TARGET",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}
