Port 13785NetBackup nbdb

Symantec NetBackup's nbdb service manages critical catalog and configuration data for enterprise backup environments. It facilitates the storage and retrieval of metadata rules, schedules, and index files necessary for effective data protection and recovery. This service underpins the core backup database processes, incorporating robust management of large-scale backup operations..

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
4/10

caution

lookups
8,790

rank 571 of 993 · top 57%

Technical Details

what runs on :13785

The Symantec NetBackup nbdb service, initially developed under the VERITAS brand, utilizes a proprietary database management system to control backup catalog information and configuration data. It ensures consistent and reliable storage of metadata required to index, locate, and restore backed-up files in enterprise scenarios. nbdb communicates between NetBackup components, orchestrating backup, restore, duplication, and reporting operations that rely heavily on up-to-date catalog records.

Typically, port 13785 is employed by the NetBackup database daemon (nbdb) to facilitate network communications for catalog synchronization and maintenance, supporting both TCP and UDP protocols. This bi-directional capability enhances real-time replication and updates between master and media servers, boosting operational efficiency. nbdb interacts closely with embedded Sybase/SQL Anywhere databases, which underpin catalog storage in NetBackup architecture.

Smooth operation of nbdb involves secure and stable connectivity to ensure backup jobs register correctly and metadata remains consistent under load. System administrators must carefully configure the database service, monitor health, and optimize performance to prevent failures that would jeopardize restore capabilities and data integrity.

Security Information

exposure of :13785

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

databases averages 4.0 across 58 ports — this one sits level with it.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Common Vulnerabilities:

  • Unauthorized access due to insufficient network segmentation can expose NetBackup database communications.
  • Susceptibility to brute force attacks or credential leaks may compromise catalog data.
  • Potential exploitation through unpatched service vulnerabilities enabling privilege escalation or denial of service.
  • Lack of encryption support on this port can lead to interception and manipulation of sensitive metadata streams.

Mitigations:

  • Isolate backup infrastructure on dedicated, firewalled network segments.
  • Enforce strong authentication, role-based access controls, and regular credential updates for NetBackup administrative accounts.
  • Apply vendor-released patches promptly to address known service vulnerabilities.
  • Where feasible, use VPNs or internal-only exposure to restrict access, supplementing with host-based firewalls.
  • Monitor connection attempts and anomalous activity on port 13785 to detect attacks.
  • Document and audit backup workflows regularly to ensure adherence to security best practices.

the 8 most looked-up other ports in databases — 58 ports carry that label.

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted