How to Check Open Ports on a Server: A Complete Guide

Checking open ports is one of the most crucial tasks for server administrators and web developers. An open port means there is a service on the server accepting connections. However, each open port is a potential vulnerability.

What Are Ports and Why Check Them?

Network ports are logical connection points through which applications exchange data. Each port has a number ranging from 0 to 65535. The most common ports are:

• 80 (HTTP) — non-encrypted web server
• 443 (HTTPS) — web server with SSL/TLS
• 22 (SSH) — secure remote access
• 3306 (MySQL) — MySQL database
• 5432 (PostgreSQL) — PostgreSQL database
• 6379 (Redis) — Redis cache server

Online Port Check

The easiest way is to use the Xuvero online port scanner. Enter an IP address or domain, select the ports, and get results in seconds. The tool uses parallel connections for fast checking of multiple ports simultaneously.

Command Line Port Check

Nmap — The Most Powerful Scanner

nmap -sT -p 80,443,22,3306 example.com

Nmap will show the status of each port: open, closed, or filtered.

Telnet — Quick Check of a Single Port

telnet example.com 80

If a connection is established, the port is open. If "Connection refused," it's closed.

Netcat (nc) — Versatile Tool

nc -zv example.com 80-443

The -z flag performs scanning without sending data, -v — provides detailed output.

How to Protect Open Ports?

1. Close unnecessary ports using a firewall (iptables, ufw, firewalld)
2. Change default ports — move SSH from 22 to another port
3. Use fail2ban to block brute-force attacks
4. Set up VPN for access to administrative ports
5. Regularly update server software

Conclusion

Regularly checking ports is basic server security hygiene. Use Port Checker from Xuvero for quick online diagnostics or nmap for deep analysis.