Internet-Security raven logo internet-security.com

UDP 6887

ProtocolUDP
Port6887
LabelsBitTorrent range

Synopsis

  • BitTorrent’s Distributed Hash Table (DHT) uses UDP on the client’s listening port, and historically many clients listened on 6881–6889, so UDP 6887 is commonly seen for DHT traffic.
  • The original BitTorrent client (Mainline) defaulted to ports 6881–6889, which included UDP 6887 for DHT after DHT was introduced.
  • Popular clients such as µTorrent/BitTorrent (Mainline), Vuze/Azureus, and qBittorrent use UDP 6887 for DHT when their listen port is configured to 6887 (a configuration widely observed in the wild).
  • Security note: BitTorrent DHT over UDP (including on 6887) has been abused for reflection/amplification DDoS attacks.

Observed activity

Last 30 days Detailed chart

More information