Port 6379 (Redis)
Default port for the Redis in-memory data store.
- Transport
- TCP
- Internet exposure
- Never expose
Should not be reachable from the internet.
Security notes
- Older Redis versions had no authentication by default; exposed instances are taken over to write SSH keys or cron jobs.
- Widely exploited for cryptomining. Bind to localhost and require a password or ACLs.
When it shows up in your logs
Any internet connection to 6379 is likely exploitation or scanning.