Databases. EXPOSED! (Redis)

*Executive summary:* Censys analyzed 350,675 Internet-accessible Redis services and found 39,405 (11%) unauthenticated instances, observed geographic and AS-level distributions of exposed data, and identified widespread attempts to exploit Redis's ability to write files (via CONFIG and SAVE) to drop malicious cronjobs and SSH keys; a one-time scan found the 'backup1' key on approximately 15,526 hosts (about 49% of sampled unauthenticated servers), indicating large-scale exploitation attempts though not confirming successful compromises.