- Restrict management and monitoring protocols to the monitoring network.
- Replace community strings and default credentials.
- Send logs over TLS.
Port 5990: WBEM Export HTTPS
Port 5990 is assigned by IANA to wbem-exp-https (WBEM Export HTTPS).
5990
How wbem-exp-https works
Monitoring & loggingThe monitoring server collects metrics, alerts or logs from devices over port 5990.
- Transport
- TCP · UDP
- Exposure risk
- not rated depends on the program listening
- Encryption
- Unknownnot stated by the registry
- IANA status
- Assigned1 registered service
- Range
- Registered (1024-49151)
- Category
- Monitoring & logging
Is port 5990 dangerous?
We have no specific security note for port 5990. Its risk depends on the program actually listening on it. General advice for monitoring & logging services:
IANA registry entries for port 5990
| Service | Port | Transport | Description | Reference | Updated |
|---|---|---|---|---|---|
| wbem-exp-https | 5990 | TCP, UDP | WBEM Export HTTPS | - | 2004-11 |
// source: IANA service name and port number registry
Which program uses port 5990, and is it reachable?
Linux
sudo ss -ltnup 'sport = :5990' # process listening on 5990
sudo lsof -nP -i :5990macOS
sudo lsof -nP -i :5990
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 5990 -State Listen | Select LocalAddress, OwningProcess Get-NetUDPEndpoint -LocalPort 5990 netstat -ano | findstr :5990
From another machine
nmap -p 5990 -sV <host> sudo nmap -sU -p 5990 <host> nc -zv <host> 5990
Block it in the firewall
sudo ufw deny 5990/tcp # Linux (ufw) New-NetFirewallRule -DisplayName "Block 5990" -Direction Inbound -LocalPort 5990 -Protocol TCP -Action Block # Windows
What is port 5990 used for?
Port 5990 is assigned by IANA to wbem-exp-https (WBEM Export HTTPS).
Is port 5990 TCP or UDP?
Port 5990 is registered for TCP and UDP.
Is it safe to open port 5990?
It depends on the program that listens on it. Open it only for a service you know and only to the networks that need it. Restrict management and monitoring protocols to the monitoring network.
How do I check if port 5990 is open?
On Linux run "ss -ltnup 'sport = :5990'", on macOS "lsof -nP -i :5990", and on Windows "netstat -ano | findstr :5990" to see the local process. From another machine, "nmap -p 5990 <host>" shows whether it is reachable.
Other monitoring & logging ports
:161 SNMP udp · tcp · high risk :162 SNMP trap udp · tcp · moderate risk :9090 Prometheus / admin consoles tcp · udp · high risk :514 Syslog udp · tcp · moderate risk :6514 Syslog over TLS tcp · udp · dccp · low risk :5601 Kibana tcp · udp · high risk :391 SynOptics SNMP Relay Port tcp · udp :412 Trap Convention Port tcp · udp