Open Ports Lookup
Validation Error
Port Status Results
No Ports Found
No port entries match the active filter criteria.
Every open port on a server is a door. Most of them need to be open for the server to do its job, but plenty of servers accumulate open ports nobody remembers opening. This tool scans the commonly targeted ports (21, 22, 80, 443, 3306, and similar) on a given IP or hostname and reports which are actually reachable from outside.
Quickly scan the most commonly targeted ports (e.g., 21, 22, 80, 443, 3306) to ensure only authorized services are exposed.
Verify that your edge firewalls, security groups, and IPTables rules are successfully dropping or rejecting external traffic.
Identify active services running on your infrastructure to prevent shadow IT and mitigate the risk of zero-day exploits.
What the results tell you
- Open: the port is reachable and something is listening
- Closed: the port responded but nothing is listening on it
- Filtered: a firewall is silently dropping packets, so the true state can't be confirmed
A quick word on responsible use
This tool is built for checking infrastructure you actually manage, confirming your own firewall rules are doing what you think they're doing. Scanning systems you don't have permission to test isn't something we'd recommend, in most places it's a legal grey area at best.
Auditing a server's security? Pair this with an SSL Checker run to cover both the network and certificate side of things.
FAQS
What is a Port Scanner?
A port scanner probes a server or network to determine which network ports are open and listening for incoming connections.
Why are open ports dangerous?
Open ports themselves aren't dangerous, but the software listening on them might have vulnerabilities. Closing unused ports minimizes your attack surface.
What does "Filtered" mean?
"Filtered" means a firewall or network appliance is dropping the packets silently, so the scanner cannot determine if the port is actually open or closed.
Can I scan any IP?
Our tool is designed for system administrators to verify their own infrastructure. Scanning third-party networks without permission is strongly discouraged.