Port 6687CleverView for cTrace Message Service

TCP port 6687 is assigned to the CleverView for cTrace message service.

transport
tcp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
1/10

safe

lookups
0

rank 993 of 5,758 · top 17%

also known as clever-ctrace

Technical Details

what runs on :6687

CleverView for cTrace Message Service is registered on port :6687 over tcp to David Cheng, assigned February 2010. We don't have a technical write-up for it beyond the IANA registry entry.

In nmap's internet-wide scan data this port is never observed open, so if it's open on your network it's more likely a custom or misconfigured service than the registered one.

find what's listening on :6687

this machine
# linux
sudo ss -tlpn 'sport = :6687'

# macos / bsd
sudo lsof -nP -i :6687

# windows (then: tasklist /FI "PID eq <pid>")
netstat -ano | findstr :6687
another host
nmap -sV -p T:6687 <host>

run it? the handshake, the implementations you meet in the wild and the flags that matter come from the engineers who do.

add technical details

Security Information

exposure of :6687

risk score

1/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

no security notes recorded for :6687 yet

known exploits, hardening advice, what a compromise looks like — suggest an edit if you know its exposure.

ports registered around :6687, by lookups.

portservicerisk
:6697IRC over SSLcaution
:6646McAfee Agent Discoverycaution
:6679IRC SSLcaution
:6665IRCcaution
:6660IRCcaution
:6699WinMXcaution
:6703e-Design websafe
:6627Allied Electronics NeXGensafe

risk mix of the 8 listed

  • safe25%
  • caution75%

2 of 8 encrypted