Port check results

Tests from SkyPath's network, not your device

Port check

TCP
Check one port
Common
Scan profile

What this means

Open means SkyPath's network reached the host and the port accepted a TCP connection — the service is reachable from the internet on that port.

Closed means the host responded but nothing is listening on that port, or the connection was actively refused.

Filtered usually means a firewall dropped the connection without a clear refusal — common when a port is blocked but not explicitly closed.

Use scan profiles to audit web stacks, mail servers, databases, or remote-access ports in one pass — faster than checking ports one by one.

Open ports on Redis (6379), MongoDB (27017), RDP (3389), or Docker API (2375) include security context — these services are frequently attacked when exposed publicly.

TCP checks use SkyPath’s edge Worker. UDP checks use the Probe for real datagram probes — never faked.

This test runs from SkyPath's servers, not your browser. Results show what the host exposes to the public internet, which may differ from your local network view.

Learn more

TCP vs UDP port checks

TCP checks whether a host accepts a connection handshake — useful for web servers, SSH, databases, and most admin services.

UDP checks whether a host responds to datagram traffic — common for DNS, VPN tunnels, and game servers. UDP replies are often silent, so results may show open|filtered.

What is a TCP port check?

Computers expose services on numbered ports — for example, HTTPS on port 443 and SSH on port 22.

A port check attempts to open a TCP connection to a host and port. If the connection succeeds, the port is open. If it is refused or times out, the port is closed or filtered.

Scan profiles and custom ranges

Industry port scanners group checks by purpose — web, mail, remote access, databases, and cloud infrastructure.

SkyPath offers named profiles plus Custom: enter comma-separated ports (80,443) or ranges (8000-8010) for up to 32 ports per scan. Multi-port scans are TCP-only.

Open vs closed vs filtered

Open: a service is listening and accepted the connection (or replied to a UDP probe).

Closed: the host is reachable but nothing accepted traffic on that port.

Filtered / open|filtered: packets were dropped or UDP produced no definitive reply — common for firewalled or silent UDP services.

Limitations

UDP semantics are best-effort; many services never reply to empty probes.

Results reflect reachability from SkyPath's network, not from your home or office connection.

Some hosts rate-limit or block port probes from cloud networks, which can look like a filtered port even when the service is up.

FAQ

What does an open port mean?

An open port means a TCP connection to that host and port succeeded from SkyPath's network (or a UDP probe received a reply). A service is listening and reachable on the public internet.

Can I scan multiple ports at once?

Yes for TCP. Switch to Port scan, pick a profile like Common services (32 ports), Web stack, or Databases — or enter custom ports like 80,443 or 8000-8010. Results stream in as each batch completes.

Can I check common ports quickly?

Yes. Use quick-pick chips for SSH, HTTPS, RDP, and more in single-port mode — or run a scan profile to check dozens of ports in one pass.

What is the difference between closed and filtered?

Closed usually means the host actively refused the connection — nothing is listening on that port. Filtered often means a firewall dropped the packets without a clear refusal, so the check timed out.

Does this work for UDP ports?

Yes for single-port checks. UDP probes run on SkyPath’s Probe network. Multi-port scans remain TCP-only. UDP results may show open|filtered when there is no ICMP or application reply.

Can I check ports on my own computer?

This tool checks remote hosts from SkyPath's servers. Private and local addresses are blocked. To test ports on your own machine, use a local scanner or check from another device on your network.

Why might a port show filtered when my service is running?

Firewalls, security groups, ISP filtering, or anti-scan rules can drop probe traffic. The service may be reachable from some networks but not from SkyPath's test origin.

Is port scanning legal?

Checking ports you own or have permission to test is generally fine. Scanning systems you do not control may violate terms of service or local law. Use this tool responsibly.

SkyPath VPN

Want this protection all the time?

SkyPath VPN is free for Android — one tap to connect, no account, no logs.

Get it on Google Play