TCP 6379

ProtocolTCP
Port6379
LabelsRedis key-value data store

Synopsis

  • TCP port 6379 is the default port used by Redis, the in-memory data store and message broker.
  • Redis-compatible servers such as KeyDB, Valkey, Dragonfly, and Memurai also default to 6379 to speak the Redis protocol.
  • Managed services expose Redis on this port, including Amazon ElastiCache for Redis, Azure Cache for Redis, and Google Cloud Memorystore for Redis.
  • The Redis Serialization Protocol (RESP/RESP3) runs over TCP 6379 for client-server commands.
  • Port 6379 is frequently targeted for exploitation when Redis is exposed without authentication; attackers abuse CONFIG and replication features to write authorized_keys or cron entries and deploy malware/cryptominers.
  • Campaigns like Muhstik and RedisWannaMine, and issues such as CVE-2022-0543 (Lua RCE in Debian/Ubuntu Redis packages), have leveraged exposed Redis on 6379.

Observed activity

Last 30 days Detailed chart

More information