Port 6379 — Redis
TCP registered
What runs on port 6379
The default Redis port.
Security considerations
Redis historically had no authentication and binds to all interfaces if misconfigured. Exposed instances are routinely used to plant SSH keys and cryptominers. Bind to localhost and set a password.
Checking whether something is listening
# Linux / macOS — what is bound to the port
sudo lsof -i :6379
sudo ss -lntp | grep :6379
# Windows
netstat -ano | findstr :6379
Get-NetTCPConnection -LocalPort 6379
# is it reachable from outside?
nc -zv example.com 6379
curl -v telnet://example.com:6379
Freeing the port
# find the process, then stop it
sudo lsof -ti :6379 | xargs kill # Linux / macOS
netstat -ano | findstr :6379 # note the PID, then:
taskkill /PID <pid> /F # Windows
Should this port be open to the internet?
No. Port 6379 should never be reachable from a public address. Bind it to localhost or a private network, and reach it through a VPN or bastion host if remote access is genuinely needed. Internet-wide scanners find newly exposed instances of this service within minutes.
Quick reference
| Port | 6379 |
| Protocol | TCP |
| Service | Redis |
| Range | Registered (1024–49151) — any user process may bind |
Frequently asked questions
What is port 6379 used for?
The default Redis port.
Is it safe to open port 6379?
Redis historically had no authentication and binds to all interfaces if misconfigured. Exposed instances are routinely used to plant SSH keys and cryptominers. Bind to localhost and set a password.
How do I check if port 6379 is open?
Locally, sudo lsof -i :6379 on macOS or Linux, or netstat -ano | findstr :6379 on Windows. From outside, nc -zv host 6379 tells you whether anything answers.
Why do I get "address already in use" on port 6379?
Another process is bound to it — often a previous run of your own program that did not exit cleanly. Find it with lsof -ti :6379 and stop it, or configure your application to use a different port.
Can I change the port this service uses?
Almost always yes, in the service's configuration. Moving off a default port reduces automated scan noise, but it is obfuscation rather than security — a real attacker scans all 65,535.