Is port 111 (RPCBind / Portmapper) dangerous?

Port 111 is classified as critical risk and should not be exposed to the public internet. It transmits data without encryption, making it vulnerable to eavesdropping and credential theft.

Should port 111 be open on my firewall?

No, port 111 should not be open to the public internet. Block it at the firewall and use encrypted alternatives such as SSH, SFTP, or HTTPS instead.

What transport protocol does port 111 use?

Port 111 (RPCBind / Portmapper) uses the TCP/UDP transport protocol and falls under the System & Infrastructure category.

:111 (TCP/UDP)

RPCBind / Portmapper

Critical Risque

TCP/UDP — System & Infrastructure

Aperçu du port

Numéro de port 111

Nom du service RPCBind / Portmapper

Protocole de transport TCP/UDP

Catégorie System & Infrastructure

Risque de sécurité Critical

Plage de ports Bien connu (0-1023)

Qu'est-ce que le port 111?

RPCBind (also called portmapper) maps ONC RPC program numbers to the dynamic ports on which those services are listening. Exposing port 111 on the internet is a well-known critical vulnerability.

TCP/UDP System & Infrastructure Couramment utilisé

Considérations de sécurité

Le port 111 (RPCBind / Portmapper) est classifié comme risque critique. Ce port ne doit pas être exposé sur l'internet public. Le service transmet des données sans chiffrement, le rendant vulnérable aux écoutes clandestines, au vol d'identifiants et aux attaques de type homme du milieu.

Recommandation : Bloquez ce port au niveau du pare-feu. Utilisez des alternatives chiffrées (SSH, SFTP, HTTPS) à la place.

Ports associés — System & Infrastructure

0 Reserved 1 TCPMUX 2 Management Utility 3 CompressNET 4 Unassigned 5 RJE 6 Unassigned 7 Echo

Termes associés

Bandwidth Latency Packet Loss Ping Throughput ASN