Port 25100IBM Db2 Client Interface over TLS

TCP port 25100 is registered for encrypted IBM Db2 client connections, carrying database traffic over TLS.

transport: tcp
in transit: encrypted
assignment: official
risk: 7/10
lookups: 0

also known as db2c-tls, IBM Db2 SSL port, DRDA over TLS

Technical Details

what runs on :25100

This is a TCP listener for the IBM Db2 client interface with TLS encryption. A client establishes TLS first, then carries Db2 client/server traffic, typically using DRDA, inside the encrypted connection. Db2 installations configure their service ports; the commonly encountered Db2 TCP port is 50000, while the TLS listener is separately configured, so port 25100 should not be assumed to be present by default.

Security Information

exposure of :25100

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

databases averages 3.8 across 171 ports — this one sits 3.2 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

A reachable listener provides access to a database service and can be probed for Db2 behavior or vulnerabilities even if authentication is required. TLS protects traffic in transit but does not make an internet-exposed database safe; restrict access to trusted application networks and use strong authentication and patching.

Record

iana registry entry

port: :25100
service: IBM Db2 Client Interface over TLS
transport: TCP
encryption: tls / encrypted
assignment: iana registered
risk: 7/10risk
category: Databases
usage: When configured, an IBM Db2 database server listens here for encrypted client connections. The port is registered for this service but is not a universal Db2 default; deployments may use other configured ports.
lookups: 0rank 993
added: 2026-10-19
updated: 2026-10-19
references: IANA service name registry — port 25100

Something wrong?

This record is maintained by the engineers who use port 25100. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-19.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 171 in databases →

the 8 most looked-up other ports in databases — 171 ports carry that label.

port	service	proto	category	risk	views
:8882	Atlasz Secure App Server	TCP	Web Services	caution	66.9k
:9001	ETL Service Manager	TCPUDP	Databases	caution	28.6k
:2484	Oracle SSL Listener	TCPUDPtls	Security	caution	25.0k
:5495	Applix TM1 Admin	TCP	Databases	caution	24.8k
:591	FileMaker Web Sharing	TCP	Web Services	caution	23.1k
:1521	Oracle TNS Listener	TCP	Security	caution	19.6k
:21001	AMLFilter Admin	TCP	Security	caution	19.2k
:18206	Audition FAM DB	TCPUDP	Databases	caution	19.1k

risk mix of the 8 listed

caution100%

1 of 8 encrypted

Port :25100IBM Db2 Client Interface over TLS

Technical Details

Security Information

Related Ports

Port 25100IBM Db2 Client Interface over TLS