Port 7687 (Neo4j Bolt)

Neo4j Bolt binary protocol for drivers and cypher-shell.

Registered (user) port, 1024-49151 TCP Databases Do not expose to the internet

What port 7687 is used for

Neo4j Bolt binary protocol for drivers and cypher-shell.

Do not expose to the internet. Enable TLS and auth; keep internal.

Service nameProtoDescriptionAssigneeReference

bolt TCP Bolt database connection Neo Technology Inc -

Registry dates for this port: registered 2016-09-29.

Linux: is anything listening on TCP 7687?

sudo ss -tlnp 'sport = :7687'

Linux / macOS: which process owns the port

sudo lsof -nP -i :7687

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':7687 '

Windows (Command Prompt)

netstat -ano | findstr :7687

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 7687 -State Listen | Select LocalAddress,OwningProcess

From another machine

nc -vz -w 5 HOST 7687

From Windows

Test-NetConnection HOST -Port 7687

ufw

sudo ufw deny 7687/tcp

iptables

sudo iptables -A INPUT -p tcp --dport 7687 -j DROP

nftables

sudo nft add rule inet filter input tcp dport 7687 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'Block TCP 7687' -Direction Inbound -Protocol TCP -LocalPort 7687 -Action Block

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.