TCP Port 2375 – Docker Remote API (unencrypted)

Port 2375 is the conventional home of the Docker daemon remote API in its unencrypted, unauthenticated form. It exists for local development convenience. Docker does not listen on the network unless someone configures it to, so traffic here reflects a deliberate, and often mistaken, setup choice.

About TCP Port 2375

Port 2375 carries the IANA assignment for docker. The IANA description reads: ‘Docker REST API (plain text)’.

Security Considerations

An exposed Docker API on this port is effectively root access to the host. Anyone who can reach it can start a privileged container, mount the host filesystem, and take the machine over in a few commands. Automated scanners hunt for open 2375 around the clock, and cryptomining botnets have compromised a great many hosts this way. If remote access to Docker is genuinely needed, use port 2376 with TLS client certificates, or reach the daemon over SSH. Nothing should listen on 2375 beyond localhost.

Data Sources

This information is compiled from: IANA Service Name and Transport Protocol Port Number Registry.