ZoomEye finds 177 hosts exposing Docker API port 2375
A ZoomEye query for port 2375 returned 177 hosts with the Docker daemon's unencrypted REST API exposed. Unauthenticated access to this API is effectively root access to the host, allowing container creation, host filesystem mounts and command execution.
- Port 2375 is the Docker daemon's unencrypted REST API
- API access is equivalent to root access on the host
- The query does not confirm missing TLS authentication
- Recommended: Unix socket or TLS with client certificates
Read next
Security