Port 2375 (Docker)

HoneyLabs honeypots recorded 1,982 probes against destination port 2375 (Docker) from 258 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 09:09, most recently 2026-11-15 07:39 (UTC).

What the sensors show

The sources sat in 82 networks across 28 countries. One address, 77.90.185.243, sent 60% of them. The largest source network was AS213790 (Limited Network LTD), with 60% of the probes from 1 address. 10 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
77.90.185.2431,183Limited Network LTDDE
176.65.144.527Dedik Services LimitedCH
220.181.1.16327IDC, China Telecommunications CorporationCN
3.129.187.3823Amazon.com, Inc.US
165.22.84.1022DigitalOcean, LLCDE
18.218.118.20321Amazon.com, Inc.US
103.24.217.8817VH Global LimitedHK
18.116.101.22017Amazon.com, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS213790Limited Network LTD1,1831
AS15169Google LLC12428
AS16509Amazon.com, Inc.764
AS8075Microsoft Corporation6362
AS14061DigitalOcean, LLC569
AS398324Censys, Inc.567

Where it comes from

CountryProbes
Germany1,219
United States345
Belgium125
China83
Switzerland58
Hong Kong33

Client strings seen on this port

User agentProbes
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)169
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.1) Gecko/20060601 Firefox/2.0.0.1 (Ubuntu-edgy)169
More Firefox 2.0.0.11 user agents strings -->>169
Mozilla/5.0 (compatible; Windows NT 6.1; Catchpoint) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.81 Safari/537.36169
Mozilla/5.0 (Linux; U; Android 2.3.3; de-de; GT-I9100 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1169

Port report

Port report

Loading