CyberHunter
LinkedIn profile - Bastien Cordier Email: contact@bastiencordier.pro
// Other services

Port 1: TCP Port Service Multiplexer

Port 1 is assigned by IANA to tcpmux (TCP Port Service Multiplexer).

1

How tcpmux works

Other services
client:1tcpmuxresponse client:1tcpmuxresponse

The client sends a request to port 1 and the tcpmux service answers.

Transport
TCP · UDP
Exposure risk
not rated depends on the program listening
Encryption
Unknownnot stated by the registry
IANA status
Assigned1 registered service
Range
Well-known (0-1023)
Category
Other services
01 Security

Is port 1 dangerous?

We have no specific security note for port 1. Its risk depends on the program actually listening on it. General advice for other services services:

  • Close the port if nothing on the host needs it.
  • Identify the process that listens on it (commands below) before opening it in a firewall.
  • Expose a service only to the networks that use it.
02 Registry

IANA registry entries for port 1

ServicePortTransportDescriptionReferenceUpdated
tcpmux 1 TCP, UDP TCP Port Service Multiplexer - -

// source: IANA service name and port number registry

03 Check it

Which program uses port 1, and is it reachable?

Linux

sudo ss -ltnup 'sport = :1'      # process listening on 1
sudo lsof -nP -i :1

macOS

sudo lsof -nP -i :1

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 1 -State Listen | Select LocalAddress, OwningProcess
Get-NetUDPEndpoint -LocalPort 1
netstat -ano | findstr :1

From another machine

nmap -p 1 -sV <host>
sudo nmap -sU -p 1 <host>
nc -zv <host> 1

Block it in the firewall

sudo ufw deny 1/tcp                                         # Linux (ufw)
New-NetFirewallRule -DisplayName "Block 1" -Direction Inbound -LocalPort 1 -Protocol TCP -Action Block  # Windows
04 FAQ
What is port 1 used for?

Port 1 is assigned by IANA to tcpmux (TCP Port Service Multiplexer).

Is port 1 TCP or UDP?

Port 1 is registered for TCP and UDP.

Is it safe to open port 1?

It depends on the program that listens on it. Open it only for a service you know and only to the networks that need it. Close the port if nothing on the host needs it.

How do I check if port 1 is open?

On Linux run "ss -ltnup 'sport = :1'", on macOS "lsof -nP -i :1", and on Windows "netstat -ano | findstr :1" to see the local process. From another machine, "nmap -p 1 <host>" shows whether it is reachable.

05 Related
:4444 Metasploit default / krb524 tcp · udp · high risk :31337 Back Orifice / elite tcp · udp · high risk :5 Remote Job Entry tcp · udp :9 Discard tcp · udp · sctp · dccp :11 Active Users tcp · udp :17 Quote of the Day tcp · udp :18 Message Send Protocol (historic) tcp · udp :27 NSW User System FE tcp · udp

Latest vulnerability news

All news