Docker Network and Volume Resources Enumerated

Darshan Thummar@Mighty

•updated Jun 12, 2026•0•0•4

This rule detects HTTP requests to a Docker daemon's API endpoint (port 2375) specifically targeting the '/networks' URI. This indicates an attempt to enumerate Docker network resources, which could be part of a reconnaissance phase by an attacker to understand the containerized environment.