On November 2, 2015, the Information Security Office (ISO) asked the IT community to configure systems so that their portmappers (also known as rpcbind) weren't exposed to the public Internet, or required authentication to access. Here is the ISO's description of the portmapper, its concerns with portmapper; and its plan of action dealing with systems with portmappers exposed to the public Internet:
"Portmapper is an RPC service, which always listens on tcp and udp 111, and is used to map other RPC services (such as nfs, nlockmgr, quotad, mountd, etc.) to their corresponding
Read more about Port 111 rpcbind Vulnerability