Are there any security risks in the opening of port 111?
What are the security risks of opening port 111? Where do we usually need to open port 111 and when can we close it without any other services failing?
My research on this topic led me through a blog saying that the Port 111 is a port mapper with similar functions to Microsoft's port 135 or DCOM DCE. Security Concerns: Provides rpc port map without auth, has no filtering or logging, rpcinfo probes can quickly find your Unix hosts. Shut down portmapper on any hosts not requiring rpcs, ensure it is blocked at net perimeters.
rpcbind can have an amplification factor of anywhere between x5 and x20 depending on the number of RPC services running. It should not be exposed publicly or at least only allow whitelisted IP addresses otherwise you may find the server participating in DDoS attacks.