2 entries are registered on port 6891. It is a registered port (1024–49151) — IANA records an assignee, but nothing stops other software from listening here, which is why the number carries more than one entry.
Port 6891 is commonly used by BitTorrent clients as part of a range of dynamic ports essential for peer-to-peer file transfer. It facilitates the exchange of data chunks between peers, enabling efficient decentralized distribution of large files. Since BitTorrent dynamically selects ports within a broad range, 6891 is one that often appears during torrenting activity.
Port 6891 is traditionally used by Windows Live Messenger to manage peer-to-peer file transfers. It facilitates the initiation and transfer of files between clients by creating direct connections, bypassing centralized servers. Both TCP and UDP protocols enable flexible data transfer, supporting reliable delivery and real-time connectivity during file sharing sessions.
The registry says what 6891 is registered to. What is listening on it right now is decided by the host, and only the host can be asked. Each of these prints the process behind the socket.
linux
ss -ltnp | grep ':6891\b'
macos
lsof -nP -iTCP:6891 -sTCP:LISTEN
windows
netstat -ano | findstr :6891
On Linux and Windows the process name comes back with the socket; on macOS lsof needs sudo to name a process that isn't yours. Match what it prints against the 2 entries above.
A port number is not a service. Anything may listen on 6891 — what you actually met is decided by the host, not the registry. If a service is missing here, it belongs in the registry.