TCP 5600
Synopsis
- Symantec Enterprise Security Manager (ESM): Its endpoint agents communicate with the ESM Manager over TCP port 5600 (often referenced as the “esmagent” service), used in enterprise deployments for security compliance and policy auditing on Windows and UNIX systems. I’m not aware of major hacking/exploitation campaigns specifically tied to TCP/5600 beyond generic port-scanning or misconfiguration abuse.
Observed activity
Last 30 days
Detailed chart