Port 7687Neo4j Bolt

Neo4j Bolt is the TCP protocol used by applications and drivers to connect to a Neo4j graph database.

transport: tcp
in transit: cleartext
assignment: official
risk: 8/10
lookups: 0

also known as Bolt protocol, Neo4j Bolt protocol

Technical Details

what runs on :7687

TCP 7687 is Neo4j's default Bolt connector port. A client begins with a handshake containing a magic value and proposed protocol versions; after version negotiation, Bolt exchanges binary messages encoded with PackStream and carried in length-prefixed chunks. Traffic is unencrypted unless TLS is configured (clients commonly use a secure Bolt URI when TLS is enabled). Neo4j's HTTP interfaces commonly use ports 7474 and 7473; they are separate from Bolt.

Security Information

exposure of :7687

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

databases averages 3.8 across 158 ports — this one sits 4.2 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

Bolt provides direct access to a graph database, so an exposed listener can be probed for Neo4j and targeted with credential guessing or attempts to exploit database vulnerabilities; valid access can allow sensitive data to be queried or modified. Keep it off the public internet and restrict it to trusted application hosts or a private network. Authentication is normally required, but TLS must be configured to protect credentials and database traffic in transit.

Record

iana registry entry

port: :7687
service: Neo4j Bolt
transport: TCP
encryption: cleartext
assignment: iana registered
risk: 8/10risk
category: Databases
usage: Neo4j database servers commonly listen on TCP 7687 for Bolt connections from applications, command-line tools, and database drivers. Engineers typically encounter it when deploying Neo4j or investigating application-to-database traffic.
lookups: 0rank 993
added: 2026-10-13
updated: 2026-10-13
references: IANA service name registry — port 7687

Something wrong?

This record is maintained by the engineers who use port 7687. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-13.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 158 in databases →

the 8 most looked-up other ports in databases — 158 ports carry that label.

port	service	proto	category	risk	views
:8882	Atlasz Secure App Server	TCP	Web Services	caution	66.9k
:9001	ETL Service Manager	TCPUDP	Databases	caution	28.6k
:2484	Oracle SSL Listener	TCPUDPtls	Security	caution	25.0k
:5495	Applix TM1 Admin	TCP	Databases	caution	24.8k
:591	FileMaker Web Sharing	TCP	Web Services	caution	23.1k
:1521	Oracle TNS Listener	TCP	Security	caution	19.6k
:21001	AMLFilter Admin	TCP	Security	caution	19.2k
:18206	Audition FAM DB	TCPUDP	Databases	caution	19.1k

risk mix of the 8 listed

caution100%

1 of 8 encrypted

Port :7687Neo4j Bolt

Technical Details

Security Information

Related Ports

Port 7687Neo4j Bolt