TCP 6379
Synopsis
- TCP port 6379 is the default port used by Redis, the in-memory data store and message broker.
- Redis-compatible servers such as KeyDB, Valkey, Dragonfly, and Memurai also default to 6379 to speak the Redis protocol.
- Managed services expose Redis on this port, including Amazon ElastiCache for Redis, Azure Cache for Redis, and Google Cloud Memorystore for Redis.
- The Redis Serialization Protocol (RESP/RESP3) runs over TCP 6379 for client-server commands.
- Port 6379 is frequently targeted for exploitation when Redis is exposed without authentication; attackers abuse CONFIG and replication features to write authorized_keys or cron entries and deploy malware/cryptominers.
- Campaigns like Muhstik and RedisWannaMine, and issues such as CVE-2022-0543 (Lua RCE in Debian/Ubuntu Redis packages), have leveraged exposed Redis on 6379.
Observed activity
Last 30 days
Detailed chart