UDP Port 111 – sunrpc / portmap (RPC Service Directory)
About UDP Port 111
Port 111 is registered with the Internet Assigned Numbers Authority (IANA) for sunrpc. The IANA description reads: ‘SUN Remote Procedure Call’. This port appears in 32 IDS rules and does not have notable malware activity indicators in our data.
IDS Rule References
32 IDS / security rules reference UDP port 111. Treat that number as context, not a danger score. Many detection rules are written against groups of ports rather than one service, web ports especially, so common web alternate ports inherit large counts while genuinely sensitive services can show few rules or none. Presence in IDS rules does not mean traffic on this port is malicious.
Rule categories (top 1): rpc-portmap-decode (32).
Sample rule descriptions for UDP port 111:
- PROTOCOL-RPC portmap admind request UDP
- PROTOCOL-RPC portmap amountd request UDP
- PROTOCOL-RPC portmap bootparam request UDP
- PROTOCOL-RPC portmap cmsd request UDP
- PROTOCOL-RPC portmap mountd request UDP
Data Sources
This information is compiled from: IANA Service Name and Transport Protocol Port Number Registry and Snort Community Rules (GPLv2).