CyberHunter
LinkedIn profile - Bastien Cordier Email: contact@bastiencordier.pro
// Databases & caches

Port 8086: InfluxDB

InfluxDB HTTP API.

8086

How InfluxDB works

Databases & caches
app:8086SELECT mean() app:8086SELECT mean()

The application sends a SQL query to the InfluxDB server on port 8086, which returns rows from its tables. It travels in clear text: anyone on the path can read it.

Transport
TCP · UDP
Exposure risk
7/10 high if reachable from the Internet
Encryption
Clear textreadable on the network
IANA status
Assignedcommon use differs from the registry
Range
Registered (1024-49151)
Category
Databases & caches
01 Security

Is port 8086 dangerous?

Common attacks and weaknesses

  • Instances without authentication exposing metrics and accepting writes.

How to secure it

  • Enable authentication and TLS.

Unofficial use. The IANA assignment below differs from what is usually found on this port in practice.

02 Registry

IANA registry entries for port 8086

ServicePortTransportDescriptionReferenceUpdated
d-s-n 8086 TCP, UDP Distributed SCADA Networking Rendezvous Port - 2008-02-27

// source: IANA service name and port number registry

03 Check it

Which program uses port 8086, and is it reachable?

Linux

sudo ss -ltnup 'sport = :8086'      # process listening on 8086
sudo lsof -nP -i :8086

macOS

sudo lsof -nP -i :8086

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 8086 -State Listen | Select LocalAddress, OwningProcess
Get-NetUDPEndpoint -LocalPort 8086
netstat -ano | findstr :8086

From another machine

nmap -p 8086 -sV <host>
sudo nmap -sU -p 8086 <host>
nc -zv <host> 8086

Block it in the firewall

sudo ufw deny 8086/tcp                                         # Linux (ufw)
New-NetFirewallRule -DisplayName "Block 8086" -Direction Inbound -LocalPort 8086 -Protocol TCP -Action Block  # Windows
04 FAQ
What is port 8086 used for?

InfluxDB HTTP API.

Is port 8086 TCP or UDP?

Port 8086 is registered for TCP and UDP. In practice the service mostly uses TCP.

Is it safe to open port 8086?

It is rated 7/10 (high) when exposed to the Internet. Instances without authentication exposing metrics and accepting writes. Enable authentication and TLS.

How do I check if port 8086 is open?

On Linux run "ss -ltnup 'sport = :8086'", on macOS "lsof -nP -i :8086", and on Windows "netstat -ano | findstr :8086" to see the local process. From another machine, "nmap -p 8086 <host>" shows whether it is reachable.

05 Related
:3306 MySQL / MariaDB tcp · udp · high risk :1433 Microsoft SQL Server tcp · udp · high risk :5432 PostgreSQL tcp · udp · high risk :6379 Redis tcp · critical risk :27017 MongoDB tcp · critical risk :9200 Elasticsearch tcp · udp · critical risk :1521 Oracle Database tcp · udp · high risk :11211 Memcached tcp · udp · high risk

Latest vulnerability news

All news