Port 2375Docker Remote API

Unencrypted HTTP REST API for controlling a Docker Engine daemon.

transport: tcp
in transit: cleartext
assignment: official
risk: 10/10
lookups: 0

also known as Docker API, Docker Engine API, dockerd API

Technical Details

what runs on :2375

Docker Engine exposes an HTTP-based REST API over TCP on port 2375 in the plain-text configuration. Requests use standard HTTP methods and paths such as /_ping, /version, /containers/json, and /images/json; responses are commonly JSON, while image and container stream operations may use HTTP chunked or hijacked connections. The daemon normally listens on a local Unix socket, so TCP exposure must be explicitly configured. Port 2376 is conventionally used for the same API with TLS.

Security Information

exposure of :2375

risk score

10/ 10critical

assume it is being scanned right now. do not expose this port to untrusted networks; put a vpn or bastion in front of it.

remote access averages 3.7 across 166 ports — this one sits 6.3 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

Port 2375 should not be exposed to the public internet. The default plain-text endpoint generally provides no built-in authentication, and an attacker who can reach it may control containers, access mounted host filesystems, retrieve secrets, and often obtain root-equivalent control of the Docker host. Use a Unix socket or properly configured mutual TLS on port 2376, together with network filtering.

Record

iana registry entry

port: :2375
service: Docker Remote API
transport: TCP
encryption: cleartext
assignment: iana registered
risk: 10/10critical
category: Remote Access Cloud
usage: Port 2375 carries the Docker Engine REST API when dockerd is configured to listen on TCP without TLS. Clients and orchestration tools use it to list, create, start, stop, inspect, and remove containers, images, networks, and volumes; local installations usually use the Unix socket instead, while TLS-enabled TCP commonly uses port 2376.
lookups: 0rank 994
added: 2026-09-11
updated: 2026-09-11
references: IANA service name registry — port 2375

Something wrong?

This record is maintained by the engineers who use port 2375. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-11.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 166 in remote access →

the 8 most looked-up other ports in remote access — 166 ports carry that label.

port	service	proto	category	risk	views
:8000	Intel Remote Desktop / Alternate HTTP Port	TCP	Web Services	safe	84.3k
:8888	D2GS Admin Console	TCP	Remote Access	caution	83.7k
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:8008	IBM HTTP Server Admin	TCP	Web Services	caution	58.3k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:23	Telnet	TCP	Remote Access	caution	34.8k

risk mix of the 8 listed

safe13%
caution88%

0 of 8 encrypted

Port :2375Docker Remote API

Technical Details

Security Information

Related Ports

Port 2375Docker Remote API