HTTPfy

Port 5987 (wbem-rmi)

IANA assigns port 5987 to wbem-rmi: WBEM RMI.

Registered (user) port, 1024-49151 TCPUDP

IANA assignment

Service nameProtoDescriptionAssigneeReference
wbem-rmi TCP WBEM RMI Jim Davis -
wbem-rmi UDP WBEM RMI Jim Davis -

Check what is listening on port 5987

Linux: is anything listening on TCP 5987?
sudo ss -tlnp 'sport = :5987'
Linux: UDP 5987
sudo ss -ulnp 'sport = :5987'
Linux / macOS: which process owns the port
sudo lsof -nP -i :5987
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':5987 '
Windows (Command Prompt)
netstat -ano | findstr :5987
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 5987 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 5987
From Windows
Test-NetConnection HOST -Port 5987
UDP probe (no reply does not prove it is closed)
nc -vzu -w 5 HOST 5987

Block port 5987 in the firewall

ufw
sudo ufw deny 5987/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 5987 -j DROP
nftables
sudo nft add rule inet filter input tcp dport 5987 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'Block TCP 5987' -Direction Inbound -Protocol TCP -LocalPort 5987 -Action Block
ufw
sudo ufw deny 5987/udp
iptables
sudo iptables -A INPUT -p udp --dport 5987 -j DROP
nftables
sudo nft add rule inet filter input udp dport 5987 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'Block UDP 5987' -Direction Inbound -Protocol UDP -LocalPort 5987 -Action Block

Related ports

5985WinRM (HTTP)5986WinRM (HTTPS)5988wbem-http5989wbem-https

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.