{
  "port": 8086,
  "protocol": "tcp",
  "service": "InfluxDB HTTP API",
  "oneLiner": "InfluxDB's HTTP API and UI — the default for every InfluxDB version.",
  "whatItIs": "InfluxDB's http-bind-address defaults to :8086, which serves both the write/query API and, since 2.x, the browser UI. Because the default binds all interfaces rather than loopback, a stock install on a cloud VM is reachable from anywhere the firewall allows. IANA has 8086 registered to d-s-n, a SCADA rendezvous port, which you will essentially never meet; a listener on 8086 is a time-series database. Telegraf agents, Grafana data sources and Kubernetes monitoring stacks are the usual clients.",
  "exposure": {
    "verdict": "never",
    "note": "It is a database API speaking plain HTTP by default, with API tokens sent in the clear; keep it on a private network or behind a TLS-terminating proxy."
  },
  "checkCommand": "curl -s --max-time 5 http://TARGET:8086/health",
  "links": [
    {
      "title": "InfluxDB — Configuration options (http-bind-address defaults to :8086)",
      "url": "https://docs.influxdata.com/influxdb/v2/reference/config-options/",
      "kind": "official-docs"
    },
    {
      "title": "influxdata/influxdb on GitHub",
      "url": "https://github.com/influxdata/influxdb",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 8086",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8086",
      "kind": "iana"
    }
  ],
  "ianaName": "d-s-n"
}