Port 2375 (TCP) — Docker API (plain)

Docker daemon API without TLS.

🔒 Runs locally — your input never leaves this browser tab

Exposing this gives root on the host. Cryptominers scan for it constantly.

Check if port 2375 is open

On the server, see what is listening:

sudo ss -tulpn | grep ':2375 '

From another machine, test reachability:

nc -zv your-server.example.com 2375

With UFW (Ubuntu/Debian):

sudo ufw deny 2375

With firewalld (RHEL/AlmaLinux/Rocky):

sudo firewall-cmd --permanent --remove-port=2375/tcp && sudo firewall-cmd --reload