{
  "port": 5050,
  "protocol": "both",
  "service": "Apache Mesos master (registered as mmcc)",
  "oneLiner": "Registered to an old conference-control tool, but today it is usually a Mesos master's HTTP API and web UI.",
  "whatItIs": "IANA lists 5050 as mmcc, a multimedia conference control tool from the early RTP era; Yahoo Messenger also squatted here for years before the service shut down in 2018. The live occupant now is Apache Mesos, whose master defaults to `--port=5050` for its HTTP endpoints and web UI, with agents on 5051. Hitting `http://host:5050/state` on a Mesos master returns the full cluster state as JSON.",
  "exposure": {
    "verdict": "never",
    "note": "The Mesos master API is a cluster control plane and ships without authentication enabled, so an open 5050 hands over cluster topology and, with framework access, the ability to schedule tasks. Keep it on a management network."
  },
  "checkCommand": "curl -s http://TARGET:5050/state | head -c 400",
  "links": [
    {
      "title": "Apache Mesos — Master and Agent Options (--port defaults)",
      "url": "https://mesos.apache.org/documentation/latest/configuration/master-and-agent/",
      "kind": "official-docs"
    },
    {
      "title": "apache/mesos on GitHub",
      "url": "https://github.com/apache/mesos",
      "kind": "github"
    },
    {
      "title": "IANA port registry — 5050 (mmcc)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=5050",
      "kind": "iana"
    }
  ]
}