// REFERENCE · PORT 111 · TCP/UDP

Port 111: RPC portmapper

Port 111 is the Unix RPC portmapper, which tells clients where services like NFS are listening.

AT A GLANCE
PORT
111 / TCP/UDP
SERVICE
RPC portmapper
ALSO CALLED
rpcbind, sunrpc, portmap
IF EXPOSED
HIGH RISK IF EXPOSED

What runs on port 111

rpcbind (formerly portmap) listens on TCP and UDP 111 and maps Sun RPC programs, most importantly NFS and its helpers, to the ports they actually use. It comes from Sun's network services of the 1980s and is still needed by NFS version 3 and older.

On a home network

NAS boxes with NFS enabled, Linux machines and some home servers listen on 111. Consumer devices do not.

If port 111 is reachable from the internet

Port 111 should never be reachable from the internet. It lists which RPC services a machine runs, which helps attackers find NFS shares, and exposed portmappers have been abused as reflectors in DDoS amplification attacks.

How to check whether it is open on your network

If NFS is enabled on your NAS, make sure no router rule forwards 111 or 2049. A LAN port scan will show 111 on machines where rpcbind runs.

// RELATED PORTS
2049NFSTCP/UDPHIGH RISK IF EXPOSED873rsyncTCPHIGH RISK IF EXPOSED445SMBTCPHIGH RISK IF EXPOSED
ON YOUR PHONE · EXPOSURE CHECK

To find out whether port 111 is open on something in your home, and whether the internet can reach it, the app scans your Wi-Fi from your phone and checks your public address from the outside. It says what it checked and what it could not. Get RECON for iPhone — one-time purchase, no account, nothing leaves the device.

ALL PORTSPORT LOOKUPSUBNET CALCULATOR
// OTHER TOOLS
Subnet Calculator
IPV4 · IPV6 · CIDR
MAC Vendor Lookup
OUI · MA-L · MA-M · MA-S
Certificate & CSR Decoder
X.509 · PKCS#10 · PEM · DER
DNS Leak Test
VPN · RESOLVER · PRIVACY
DNS Benchmark
CLOUDFLARE · GOOGLE · QUAD9 · 8 RESOLVERS
Port Lookup
TCP · UDP · WHAT IS PORT…
HAR Analyzer
HTTP ARCHIVE
What Is My IP
PUBLIC IP · FINGERPRINT