Network
Verify TCP port forwarding on your public IP — or check any host. Single-port checks and scan profiles for web, mail, databases, and remote access, with security notes for exposed services.
TCP tests from SkyPath's network, not your device
| Port | Service | Status | Time |
|---|---|---|---|
| Waiting to scan… | |||
Open — SkyPath’s network reached the host and the port accepted a TCP connection.
Closed — the host refused the connection; nothing is listening on that port.
Filtered — no clear response (often a firewall drop). The service may still be up for other networks.
Use scan profiles to audit web stacks, mail servers, databases, or remote-access ports in one pass.
Open ports on Redis (6379), MongoDB (27017), RDP (3389), or Docker API (2375) include security context.
This test runs from SkyPath’s edge Worker — not your browser. Results show public-internet reachability from our network.
Computers expose services on numbered ports — for example, HTTPS on 443 and SSH on 22.
A port check opens a TCP connection to a host and port from SkyPath’s network. Success means open; refuse means closed; timeout often means filtered.
To verify a router rule, run this check against your public IP (filled in on load — or confirm it with What Is My IP).
The service must be listening on the device, the router must forward that TCP port to it, and the ISP must not block the port. Residential ISPs often block inbound 25, 80, or 443.
Open here means the public internet can reach that forward. Closed or filtered usually means the forward, firewall, or ISP path still needs work.
Open: a service accepted the TCP handshake from SkyPath’s edge.
Closed: the host actively refused the connection — nothing is listening on that port from our path.
Filtered: packets were dropped or timed out without a clear refusal. A firewall, security group, or ISP filter may be dropping probes even when the service works for other clients.
If you only need to know whether the host answers at all, try Ping Test. For WireGuard, games, and other datagrams, use the UDP Port Checker.
An open port is not always a problem — HTTPS on 443 is expected. Some listeners are high risk if exposed without authentication.
Treat unexpected open RDP (3389), Redis (6379), MongoDB (27017), or Docker API (2375) as urgent: restrict them to VPN or private networks, or shut them down.
Named profiles group common ports by purpose — web, mail, remote access, databases, and cloud.
Custom mode accepts comma-separated ports (80,443) or ranges (8000-8010), up to 32 ports per scan.
Results reflect reachability from SkyPath’s network, not from your home or office connection.
Some hosts rate-limit or block probes from cloud networks, which can look like a filtered port.
A TCP connection to that host and port succeeded from SkyPath’s network. A service is listening and reachable on the public internet.
Leave your public IP in the host field (or confirm it with What Is My IP), enter the forwarded TCP port, and press Check. Open means the forward is reachable from outside your LAN.
Yes. Pick a profile like Common services, Web stack, or Databases — or enter custom ports like 80,443 or 8000-8010. Results stream in as each batch completes.
Yes. Your public IP is filled in on load. Tap a common port chip (SSH, HTTP, HTTPS, RDP, Minecraft, and more) to check immediately — or edit the port and press Check.
Closed usually means the host refused the connection. Filtered often means a firewall dropped the packets without a clear refusal, so the check timed out. Use Ping Test if you want a simple host reachability check next.
Use the UDP Port Checker for real UDP probes from SkyPath’s Probe network. This page is TCP-only (including multi-port scans).
This tool checks remote hosts from SkyPath’s servers. Private and local addresses are blocked. To test ports on your own machine, use a local scanner or check from another device on your network.
Firewalls, security groups, ISP filtering, or anti-scan rules can drop probe traffic. The service may be reachable from some networks but not from SkyPath’s test origin.
Checking ports you own or have permission to test is generally fine. Scanning systems you do not control may violate terms of service or local law. Use this tool responsibly.
SkyPath VPN
SkyPath VPN is free for Android — one tap to connect, no account, no logs.
