I think the one case you missed is `docker run -p 6666:6666 ...` which defaults to `-p 0.0.0.0:6666:6666` I can't find it in the article, but I suspect this w

I think the one case you missed is `docker run -p 6666:6666 ...` which defaults to `-p 0.0.0.0:6666:6666` I can't find it in the article, but I suspect this what actually happened. It's a bad default and unfortunately most examples build on it. Similar, it's easy to deploy MongoDB without a password. But it's also easy to set one, the docs even mention it https://hub.docker.com/_/mongo https://hub.docker.com/_/mongo And everyone can run a portscan with nmap against their servers. Unfortunately the MongoDB default ports 27017-27019 are not part of the top 1000 ports which nmap scans by default.