Loading...
[get complete service list]
Top of page
Port Information
Protocol Service Name
tcp redis Redis
Top IPs Scanning
Today Yesterday
95.217.198.85 (454)45.84.89.2 (483)
101.91.107.40 (107)89.248.163.200 (483)
3.15.169.123 (70)101.91.107.40 (442)
47.113.186.206 (65)66.240.236.116 (250)
121.43.128.131 (54)66.240.236.109 (211)
115.29.105.57 (52)47.113.186.206 (164)
139.196.42.154 (48)106.227.68.128 (142)
8.138.103.164 (42)121.41.46.50 (139)
106.15.64.156 (41)183.248.129.180 (138)
66.240.192.85 (41)140.246.124.160 (137)
Port diary mentions
URL
Anatomy of a Redis mining worm
Top of page
User Comments
Submitted By Date
Comment
Johannes 2018-05-18 12:09:53
Redis by default allows arbitrary file uploads, which can easily be leveraged to execute code. See http://blog.knownsec.com/2015/11/analysis-of-redis-unauthorized-of-expolit/
Sunny Dhabhai 2013-03-12 13:17:55
Redis Server Port which client can run queries. Default Port Exposed to Internet Could Face Brute Force Attacks. Nmap Brute Force Script For Radis: http://nmap.org/nsedoc/scripts/redis-brute.html
Top of page
CVE Links
CVE # Description
CVE-2015-8080 Integer overflow in the getnum function in lua_struct.c in Redis 2.8.x before 2.8.24 and 3.0.x before 3.0.6 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (memory corruption and application crash) or possibly bypass intended sandbox restrictions via a large number, which triggers a stack-based buffer overflow.
Top of page