How to Check Which Ports Are Open on a Host

1. Open the port checker. Go to enterno.io/en/ping.
2. Enter host and port. Example: example.com + 443. IPv4, IPv6, hostname — all supported.
3. Run the check. Result: open (port listening), closed (connection refused), filtered (firewall blocking).
4. For a full scan — Port Scanner. At /en/port-scanner you can check the top-100 ports + a custom list in one pass.
5. Locally: nmap / nc. From the command line: nc -zv hostname 443 or nmap -p 22,80,443 hostname. Online checker is simpler and checks from varied IPs.

Open tool →

Open ports on a server are essential gateways for communication between different systems. Each port corresponds to a specific service or application running on a server, allowing data to flow in and out. Understanding open ports is crucial for network security, as they can be potential entry points for unauthorized access.

Every service that runs on a server listens on a specific port. For example:

• HTTP: Port 80
• HTTPS: Port 443
• SSH: Port 22
• FTP: Port 21

When a port is open, it means that the service is actively listening for connections. Conversely, closed ports indicate that no service is available at that port, while filtered ports may be blocked by a firewall, preventing access to the service.

Monitoring open ports is vital for identifying vulnerabilities in your server. Attackers often scan for open ports to exploit weaknesses in services running on those ports. Regularly checking for open ports allows you to maintain a secure environment by ensuring only necessary services are exposed to the internet.

Nmap (Network Mapper) is a powerful tool widely used for network discovery and security auditing. It can be employed to find open ports on a server and provides detailed information about the services running on those ports.

To perform a basic scan using Nmap, you can use the following command:

This command will scan the target host for the most common 1,000 ports. To scan all 65,535 ports, use:

For a more detailed output that includes service version detection, use:

Additionally, if you want to scan for specific ports, you can specify them like this:

These commands provide a clear view of which ports are open and what services are running, enabling you to assess your server's security posture effectively.

For continuous monitoring of open ports on your server, automating port scans through scripting can save time and enhance security. Below is a simple bash script that utilizes Nmap to check for open ports and logs the results.

First, create a new script file:

Then, open the file in a text editor and add the following code:

Make sure to replace [target-host] with the actual IP address or hostname of your server. After saving the script, make it executable:

Now, you can run the script:

This will perform a full port scan and save the results to port_scan_results.txt. You can schedule this script using cron jobs for regular checks, enhancing your server's security by ensuring that any newly opened ports are promptly identified and assessed.