Usually a VNC viewer in listening mode, waiting for a remote desktop to connect back to it.
IANA registers 5500 as fcp-addr-srvr1, a name you will essentially never meet. The real-world use is reverse VNC: run vncviewer -listen and the viewer listens on 5500 so a server behind NAT can dial out to the support technician instead of the other way round. That inverts the usual direction of 5900, which is why 5500 shows up on helpdesk workstations rather than on servers. Legacy RSA ACE/Server installations also used UDP 5500 for authentication requests, per their shipped services file.
Do not expose
A listening VNC viewer accepts an inbound desktop session from anyone who reaches it, and classic RFB gives you no transport encryption — restrict it to a VPN or an SSH tunnel.
$ sudo lsof -nP -iTCP:5500 -sTCP:LISTENSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.