{
  "port": 2005,
  "protocol": "tcp",
  "service": "berknet / deslogin (legacy)",
  "oneLiner": "A legacy registration — berknet at IANA, deslogin in old /etc/services, Cisco line 5 in practice.",
  "whatItIs": "IANA registers 2005/tcp as berknet and 2005/udp as oracle; traditional Unix /etc/services files instead call it deslogin, an encrypted symmetric telnet replacement from the early 1990s. None of these are in real use today. A listener on 2005 is realistically line 5 of a Cisco terminal server (reverse telnet uses 2000 plus the line number) or an unrelated local application.",
  "exposure": {
    "verdict": "careful",
    "note": "Fingerprint what is actually there; if it is a device console over reverse telnet, that is cleartext management access and must stay internal."
  },
  "checkCommand": "nc -vz TARGET 2005",
  "links": [
    {
      "title": "IANA port registry — 2005 (berknet)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=2005",
      "kind": "iana"
    }
  ]
}