An Oracle 10g database with the browser-based iSQL*Plus console still running.
IANA lists 5558-5564 as unassigned. The use that put 5560 on port lists is Oracle iSQLPlus, the browser front-end to SQLPlus, which Oracle 10g served from an OC4J instance at http://host:5560/isqlplus/; the actual port for an installation is recorded in $ORACLE_HOME/install/portlist.ini. Oracle dropped iSQL*Plus after 10g, so a live 5560 means an old database server. Legacy RSA ACE/Server services files also placed sdlockmgr, its lock manager, on this port.
Do not expose
iSQL*Plus is a web login straight into a database over plain HTTP — exposing it publishes both the credentials and the SQL console.
$ curl -sS -o /dev/null -w '%{http_code}\n' http://TARGET:5560/isqlplus/Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.