Internet-Security raven logo internet-security.com

TCP 5500

ProtocolTCP
Port5500
LabelsHotline control connection

Synopsis

  • Oracle Database Enterprise Manager Express (EM Express) uses HTTPS on TCP port 5500 by default in Oracle 12c/18c/19c for database administration.
  • VNC “listening viewer” mode uses TCP 5500 for reverse connections; RealVNC, TightVNC, and UltraVNC viewers (vncviewer -listen) wait on 5500 while the remote server calls back to that port.
  • UltraVNC SingleClick and similar helpdesk workflows commonly have client modules initiate a reverse VNC session to the support host on TCP 5500.
  • Hotline (Hotline Communications) servers historically used TCP 5500 as the default port for client connections, and some legacy/community servers still do.
  • Security note: attackers sometimes abuse the VNC reverse-connection convention on 5500 to establish stealthy remote desktop backdoors or callbacks.

Observed activity

Last 30 days Detailed chart

More information