Event ID - 1

Port No1
Service Nametcpmux
RFC Doc1078
ProtocolTCP
Descriptiontcpmux - TCP Port Service Multiplexer

Scans against this port are commonly used to test if a machine runs SGI Irix (as SGI is the only system that typically has this enabled). This service is almost never used in practice.
Reference LinkTCP port service Multiplexer (TCPMUX): RFC1078
AttackVirtually all traffic to port 1 can be considered hostile.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.