Port 2087 (WHM (HTTPS))

WebHost Manager, the root-level cPanel admin panel, over HTTPS (2086 is HTTP).

Registered (user) port, 1024-49151 TCP Remote access Expose only to trusted sources

What port 2087 is used for

WebHost Manager, the root-level cPanel admin panel, over HTTPS (2086 is HTTP).

Expose only to trusted sources. Root access to the server; restrict to admin IPs and enable 2FA.

Service nameProtoDescriptionAssigneeReference

eli TCP ELI - Event Logging Integration Maya Zimerman -

eli UDP ELI - Event Logging Integration Maya Zimerman -

Linux: is anything listening on TCP 2087?

sudo ss -tlnp 'sport = :2087'

Linux / macOS: which process owns the port

sudo lsof -nP -i :2087

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':2087 '

Windows (Command Prompt)

netstat -ano | findstr :2087

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 2087 -State Listen | Select LocalAddress,OwningProcess

From another machine

nc -vz -w 5 HOST 2087

From Windows

Test-NetConnection HOST -Port 2087

Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.

ufw (one trusted source)

sudo ufw allow from 203.0.113.10 to any port 2087 proto tcp

iptables

sudo iptables -A INPUT -p tcp --dport 2087 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 2087 -j DROP

nftables

sudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 2087 accept
sudo nft add rule inet filter input tcp dport 2087 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'TCP 2087 trusted' -Direction Inbound -Protocol TCP -LocalPort 2087 -RemoteAddress 203.0.113.10 -Action Allow

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.