{
  "port": 2100,
  "protocol": "tcp",
  "service": "Amiga Network Filesystem / Oracle XML DB FTP",
  "oneLiner": "Registered to the Amiga Network Filesystem, but in practice usually Oracle XML DB's FTP listener.",
  "whatItIs": "IANA assigns 2100 to the Amiga Network Filesystem, which you will essentially never meet. What actually turns up on this port is Oracle XML DB: Oracle's documentation uses 2100 as the FTP port for reaching the XML DB repository, and older database installs shipped it preconfigured alongside HTTP on 8080. Current releases disable it — the ftp-port setting defaults to 0 — so an open 2100 on a database host means someone turned FTP on. Connect and you get an FTP banner naming Oracle, and logins are database accounts.",
  "exposure": {
    "verdict": "never",
    "note": "If it is Oracle XML DB, this is cleartext FTP authenticating with database credentials straight into the repository. Leave ftp-port at 0 and use HTTPS/WebDAV or a tunnel instead."
  },
  "checkCommand": "printf 'QUIT\\r\\n' | nc -v TARGET 2100",
  "links": [
    {
      "title": "Oracle Database 19c — Repository Access Using Protocols (FTP, HTTP(S), WebDAV)",
      "url": "https://docs.oracle.com/en/database/oracle/oracle-database/19/adxdb/repository-access-using-protocols.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}