WHATPORT(513) whatport.net WHATPORT(513)
513

rlogin

BSD rlogin — a remote shell session that trusts the client host instead of asking for a password.

TCP IANA registry

Description

rlogin, documented in RFC 1282, gives a terminal session much like Telnet, but its authentication is host-based: the server trusts a connection from a privileged source port if the client host and user appear in /etc/hosts.equiv or the target user's ~/.rhosts. That trust model is the reason it died — anyone who can spoof an address or compromise one trusted host inherits accounts everywhere. The traffic, including anything typed into the session, is unencrypted. UDP 513 is a different service entirely, rwho, which broadcasts who is logged in and the machine's load average.

Exposed to the internet?

Do not expose

Cleartext interactive login with address-based trust — a .rhosts entry plus a spoofed or compromised peer is a remote shell. SSH replaced this in the 1990s.

Check it yourself

$ nc -vz -w 3 TARGET 513

See also

Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.

Get Beige Box →

also available as JSON · Markdown

Corrections or a missing port? Reply @rimrocksystems.