Kerberized rsh — remote command execution authenticated by Kerberos ticket.
IANA registers TCP 544 as "kshell", described simply as krcmd: the Kerberos version of rsh, which runs a single command on a remote host using a Kerberos ticket in place of the .rhosts host trust that plain rsh on 514 uses. Like klogin on 543, it came from the Kerberized application suite that MIT moved out of the krb5 core distribution in release 1.8, and it has been superseded by SSH with GSSAPI authentication. Seeing it open points at a legacy Kerberos realm or an old commercial Unix box.
Do not expose
Remote command execution on an unmaintained service, and the surrounding realm is likely just as old. Nothing about this belongs on a public address.
$ nc -vz -w 3 TARGET 544Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.