On a recent Advanced Threat Analytics 1.6 install we got
Event 15005 HTTPEVENT
Unable to bind to the underlying transport for xxx.xxx.xxx.xxx:5985. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine. The data field contains the error number.
After reboot and was then unable to access the webconsole of the ATA Center Install
Workaround for now set World Wide Web Publishing to delayed automatic start