Port 13721Symantec NetBackup bpdbm
Port 13721 is primarily used by Symantec NetBackup's bpdbm service, formerly part of VERITAS, facilitating central database management for backup and recovery operations across enterprise environments. It supports both TCP and UDP protocols to enable communication between NetBackup servers, clients, and administration consoles, ensuring seamless management of backup catalog data and resource coordination..
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 4/10
- lookups
- 6,545
2 transports registered
payload readable on path
registered with iana
caution
rank 776 of 993 · top 78%
Technical Details
what runs on :13721Symantec NetBackup, previously acquired from VERITAS, is an enterprise-class backup and recovery software suite designed to protect critical data across physical, virtual, and cloud environments. The bpdbm (Backup Database Manager) service operates on port 13721 and is a core component, maintaining the NetBackup catalog database which tracks backup metadata, job records, and configuration details.
The bpdbm service plays a pivotal role during backup and recovery operations. It facilitates client-server communication, orchestrates policy execution, and manages queries related to backup images. Utilizing both TCP and UDP protocols on port 13721, bpdbm ensures reliable data transfers and efficient management commands between various NetBackup components.
Deployment of bpdbm typically occurs on the master server within a NetBackup domain, centralizing control and providing the command/control structure necessary for managing distributed backup infrastructure. Its stability and accessibility are critical for maintaining system integrity and maximizing backup and recovery performance across environments.
Security Information
exposure of :13721risk score
4/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
file transfer averages 4.1 across 114 ports — this one sits 0.1 below.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
Common Vulnerabilities:
- Unauthorized access due to exposed port and weak authentication mechanisms
- Potential exploitation through buffer overflows or input validation flaws in the bpdbm service
- Denial-of-Service (DoS) attacks via malformed packets or request flooding
- Information disclosure if communication is intercepted, especially since traffic is typically unencrypted
Common Mitigations:
- Restrict port 13721 exposure using firewalls, allowing access only from trusted hosts
- Enforce strong authentication and access controls within NetBackup configuration
- Employ segmentation to isolate backup infrastructure from general network traffic
- Regularly update and patch NetBackup software to remediate known vulnerabilities
- Utilize encrypted control channels (where supported) or secure transport protocols such as VPNs to protect data in transit
Related Ports
the 8 most looked-up other ports in file transfer — 114 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :17500 | Dropbox LAN Sync | TCPUDP | File Transfer | caution | 43.7k |
| :548 | Apple Filing Protocol | TCP | File Transfer | caution | 36.8k |
| :7000 | Vuze HTTPS Tracker | TCPtls | Security | caution | 28.9k |
| :1337 | PowerFolder P2P | TCP | Security | caution | 27.1k |
| :9001 | SharePoint Authoring | Web Services | caution | 26.3k | |
| :8080 | FilePhile Relay | UDP | File Transfer | caution | 25.6k |
| :1337 | WASTE Encrypted Sharing | TCP | Security | caution | 22.9k |
risk mix of the 8 listed
- caution100%
1 of 8 encrypted