• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Threaded RESP PING/INFO recon sweep against Redis TCP/6379

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Ibrahim Saud@tektrix
    •updated 23 days ago•0•0•2

    Detects potential reconnaissance activities targeting Redis services on port 6379, specifically looking for unauthenticated 'PING' commands and subsequent responses indicating either authentication requirements or an open, unauthenticated instance.

    Suricata

    Tags

    TA0043 - ReconnaissanceT1595.002 - Vulnerability ScanningT1046 - Network Service DiscoveryTA0007 - DiscoveryNetwork Scan DetectedIDS IPS AlertNetwork GenericLinuxSuricata IDSSnort IDSRedisTCPAttempted Recon

    Found in

    • SilkParasite Redis Cryptomining Botnet Infrastructure ExposedLast updated 25 days ago
    • Redis Cryptomining Botnet Compromises Over 3,500 ServersLast updated Sep 9, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?