Registered to Internet Security Systems for RealSecure, a discontinued intrusion detection product.
2998 is registered as realsecure, assigned to Internet Security Systems for RealSecure — the network IDS line that ISS sold through the late 1990s and 2000s and that IBM absorbed after acquiring ISS in 2006. Nmap still labels 2998 as the RealSecure remote console admin port. The product line is long gone, so a listener today is far more likely to be unrelated software on a free port than an IDS console.
Do not expose
If it really is a security-appliance console port, that is an admin plane for the sensor and has no business being reachable from outside the management network.
$ nc -vz -w 3 TARGET 2998Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.