{
  "port": 50000,
  "protocol": "tcp",
  "service": "IBM Db2 (by convention)",
  "oneLiner": "Db2's conventional instance port — widely used, but by convention only, since IANA cannot assign in this range.",
  "whatItIs": "50000 is in the Dynamic/Private range and has no IANA assignment; IANA's registered ibm-db2 name belongs to port 523, not here. In practice 50000 is the default TCP service port configured for a Db2 LUW instance, which is why Db2 containers and installers publish it and why Nmap's service list labels it ibm-db2. It is also a common human-chosen port for application servers and proxies simply because it is a round number at the start of the range, so an open 50000 needs fingerprinting rather than assumption.",
  "exposure": {
    "verdict": "never",
    "note": "If it is Db2, it is a database listener with the whole dataset behind it — bind it to a private network and reach it over a VPN or tunnel."
  },
  "checkCommand": "nmap -Pn -sV -p 50000 TARGET",
  "links": [
    {
      "title": "IBM Db2 documentation — Db2 port usage information",
      "url": "https://www.ibm.com/docs/en/db2/11.5.0?topic=installing-db2-port-usage-information",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry (ibm-db2 is registered at 523)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "RFC 6335 — IANA Procedures for Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.rfc-editor.org/rfc/rfc6335.html",
      "kind": "spec"
    }
  ]
}