Why should Redis NEVER be exposed on port 6379?

Unprotected Redis instances can be hijacked within seconds by automated bots that rewrite system files or install cryptocurrency miners via Redis write commands.

How do I bind Redis to localhost only?

Open redis.conf, find the 'bind' directive, set it to 'bind 127.0.0.1 ::1', ensure 'protected-mode yes' is enabled, and restart the redis service.

How do I check if my Redis port 6379 is open to the public?

Enter your server's public IP into our Open Port Checker. If port 6379 shows OPEN, close it immediately via your firewall.

Home/Open Port Checker/Port 6379

Port 5432 Port 8080

Registered Port Reference

Port 6379: Redis In-Memory Store (TCP)

In-memory data structure store used as a high-speed database, cache, message broker, and streaming engine.

Port Number

6379

Transport

TCP

Security Risk

Critical

Standard / RFC

RESP Protocol

Test Port 6379 Reachability Live

Verify whether Port 6379 is open, closed, or filtered on your server or public IP address.

Loading port checker...

Service Architecture & Function

Port 6379 is the default TCP listening port for Redis and Valkey. Because Redis is engineered for maximum throughput, it intentionally minimizes protocol overhead and historic versions shipped without any authentication enabled by default.

Security Profile & Hardening

Leaving Redis open on port 6379 without authentication is one of the most frequently exploited misconfigurations on the internet. Attackers can execute commands to write SSH keys to disk, download crypto miners, or dump all cached user sessions. Always bind Redis to 127.0.0.1 and set a strong requirepass.

Example Firewall Commands:

# UFW (Ubuntu/Debian)

sudo ufw deny 6379/tcp

# iptables (Direct Kernel)

iptables -A INPUT -p tcp --dport 6379 -j DROP