It's not Slack specific (am seeing it here on my non-slack boxes too).
You could try (as root):
$ fuser 587/tcp
If some progrom is actually using it the PID will be shown, from there you can find out which program.
I'm not entirely sure, but sendmail comes to mind.