A legacy registration — berknet at IANA, deslogin in old /etc/services, Cisco line 5 in practice.
IANA registers 2005/tcp as berknet and 2005/udp as oracle; traditional Unix /etc/services files instead call it deslogin, an encrypted symmetric telnet replacement from the early 1990s. None of these are in real use today. A listener on 2005 is realistically line 5 of a Cisco terminal server (reverse telnet uses 2000 plus the line number) or an unrelated local application.
Expose with care
Fingerprint what is actually there; if it is a device console over reverse telnet, that is cleartext management access and must stay internal.
$ nc -vz TARGET 2005Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.