Open Port Scanner: How to Check Open Ports on a Server or Domain
An open port scanner checks whether selected network ports on a public server or domain are reachable. It helps verify firewall rules, troubleshoot inaccessible services, and identify unnecessary exposure.
Scan common server ports with DNSCheckers.com.
What Is a Network Port?
An IP address identifies a system, while a port number identifies the application or service receiving a connection.
- 21: FTP
- 22: SSH
- 25: SMTP
- 53: DNS
- 80: HTTP
- 110: POP3
- 143: IMAP
- 443: HTTPS
- 465: SMTP over TLS
- 587: SMTP submission
- 993: IMAP over TLS
- 995: POP3 over TLS
- 3306: MySQL
- 3389: Remote Desktop
What Does an Open Port Mean?
An open result normally means that a service is listening and the network path permits the connection. It does not automatically mean the service is vulnerable, but every public service should be necessary, patched, authenticated, and monitored.
Open, Closed and Filtered
| Result | Meaning |
|---|---|
| Open | A service accepted or responded to the connection |
| Closed | The host was reachable, but no service accepted the connection |
| Filtered or timed out | A firewall or network device may be dropping the probe |
How to Use an Online Port Scanner
- Enter the domain or public IP.
- Start the scan.
- Review open, closed, and timed-out ports.
- Confirm that every open service is required.
- Test the application directly when a required port appears unavailable.
When to Scan Ports
- After changing firewall rules
- After creating cloud security groups
- When a service is unreachable
- Before publishing a server
- After disabling an old service
- During an authorized security review
Why a Required Port Appears Closed
- The application is stopped
- The service listens only on localhost
- The server firewall blocks the port
- Router NAT or port forwarding is missing
- A cloud firewall blocks the port
- The ISP filters the port
- DNS points to the wrong IP
- The application uses another port
Why an Unexpected Port Is Open
Possible causes include forgotten software, an old management panel, a development service, an incorrect firewall rule, or unauthorized software. Identify the process and dependencies before closing the port.
Port Scanning and Security
A basic scan identifies reachable services but does not prove security. A complete assessment may also require version detection, vulnerability testing, patch review, authentication testing, configuration review, and log analysis.
Port Scanner vs Ping
Ping checks ICMP response behavior. A port scan tests a specific TCP service. A server can block ping while allowing HTTPS on port 443.
Troubleshooting Checklist
- Confirm DNS resolves to the correct public IP.
- Verify the service is running.
- Check the listening address and port.
- Review the operating-system firewall.
- Review NAT and port forwarding.
- Review cloud security rules.
- Check upstream filtering.
- Test from another external network.
- Review service logs.
Frequently Asked Questions
Is every open port dangerous?
No. Required public services need open ports, but each exposed service increases attack surface.
Why does a local connection work while the online scan fails?
The service may be limited to the local network or blocked by NAT, a firewall, cloud rules, or the ISP.
Can a basic scanner find every vulnerability?
No. It identifies reachability, not all software and configuration weaknesses.
Should a database port be public?
Usually it should be restricted to trusted application servers, VPNs, or private networks.
Conclusion
An online port scanner helps validate network exposure and diagnose inaccessible services.
Use the DNSCheckers.com Open Port Scanner to check common critical ports.