The TLS port for CIM-XML — the usual way hardware monitoring tools reach a CIM object manager.
IANA registers 5989 as wbem-https, CIM Operations over HTTP carried on TLS. This is the port SFCB listens on by default (SUSE documents 5989 as the default secure port), and the one used by OpenPegasus and by CIM providers baked into server BMCs, storage arrays, and hypervisor management agents. Finding it open usually means a physical server or appliance is publishing its hardware inventory and health model to a monitoring system.
Do not expose
It is an out-of-band-style management interface with Basic auth inside the TLS session and often a self-signed certificate — reachable from the monitoring network only, never the internet.
$ openssl s_client -connect TARGET:5989 </dev/null 2>/dev/null | openssl x509 -noout -subject -issuerSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.