A Veritas Backup Exec server listening for DBA-initiated Oracle and DB2 backup jobs.
IANA registered 5633 in 2006 as beorl, the BE Operations Request Listener, part of Symantec's — now Veritas' — Backup Exec. The media server opens it so database administrators can start Oracle and DB2 backups from the database host rather than from the backup console. On a scan it identifies the machine as a backup server, which is exactly the machine an attacker wants.
Do not expose
Backup infrastructure holds copies of everything; the listener belongs on the internal backup network, reachable only from the database hosts that need it.
$ nc -vz -w 3 TARGET 5633Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.