Port 2105eklogin Kerberos Remote Login
Port 2105 is used by eklogin, a version of the classic Unix remote login (rlogin) service that incorporates Kerberos encryption. It facilitates secure, authenticated remote terminal access by leveraging Kerberos to verify user identities and encrypt the login session. This port aims to provide a safer alternative to traditional rlogin, reducing risks from credential exposure and session hijacking over untrusted networks..
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- unofficial
- risk
- 2/10
- lookups
- 22,135
2 transports registered
payload readable on path
used by convention
safe
rank 99 of 993 · top 10%
2 other services are registered on port 2105. compare all 3 →
Technical Details
what runs on :2105Port 2105 is designated for eklogin, an encrypted implementation of the traditional Unix rlogin service utilizing Kerberos authentication. Classic rlogin is a legacy protocol that provides users with remote shell access, historically transmitting credentials and session data in plaintext. eklogin enhances this by integrating Kerberos, a trusted network authentication protocol using tickets to securely verify identities without sending reusable credentials across the network.
The eklogin service functions by prompting clients to obtain a Kerberos ticket-granting ticket, which is then presented during login to authenticate the user and establish a secure communication channel. This reduces the attack surface associated with credential interception and facilitates encrypted communication, thereby improving confidentiality and integrity during remote shells.
Typically, eklogin operates in environments that prioritize security but maintain backward compatibility with existing rlogin workflows. It is especially useful in academic, enterprise, or governmental Unix systems where Kerberos is deployed for centralized authentication. While not widespread compared to SSH, it still appears in legacy systems relying heavily on Kerberos infrastructure.
Security Information
exposure of :2105risk score
2/ 10safe
routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.
security averages 3.8 across 216 ports — this one sits 1.8 below.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
unofficial
used by convention, not registered — what answers here varies by deployment
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
Common Vulnerabilities:
- If misconfigured, eklogin may revert to unencrypted or weakly encrypted modes, exposing session data.
- Kerberos ticket theft or replay attacks can potentially allow attackers to impersonate users.
- Older implementations might be susceptible to buffer overflows or other memory-related vulnerabilities present in the base rlogin service.
- Lack of mutual authentication or failure of ticket validation could enable man-in-the-middle (MITM) attacks.
Mitigations:
- Ensure Kerberos infrastructure is properly secured, including timely key rotation and limiting ticket lifetimes.
- Configure eklogin to enforce strong encryption of all sessions without fallback to insecure modes.
- Regularly patch operating systems and Kerberos/rlogin software to address known vulnerabilities.
- Use network segmentation and firewall rules to limit exposure of port 2105 to only trusted hosts.
- Implement alternative secure methods such as SSH where feasible, or layer additional encryption mechanisms like VPNs.
Related Ports
the 8 most looked-up other ports in security — 216 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :443 | HTTPS | TCPtls | Web Services | caution | 65.9k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Squid Proxy HTTP | TCP | Web Services | caution | 45.8k |
| :8080 | HTTP Alternate | TCPtls | Web Services | caution | 44.9k |
| :7000 | Vuze HTTPS Tracker | TCPtls | Security | caution | 28.9k |
risk mix of the 8 listed
- caution100%
3 of 8 encrypted