Online Port Scanner
Scan a website for exposed HTTP and HTTPS ports — dev servers, admin panels, cPanel, Webmin and monitoring dashboards accidentally left open to the public internet.
What this tool checks
Every website should serve traffic on ports 80 and 443 — anything else exposed to the public internet is usually a mistake. We probe 14 well-known web ports (dev servers, admin panels, control panels, monitoring dashboards) and flag any that respond so you can lock them down behind a firewall, VPN or authentication.
This is an HTTP-level probe: we detect services that speak HTTP or HTTPS on each port. Non-web protocols (SSH, FTP, databases) require a native TCP scanner — for those, run nmap from a machine you own.
Ports we scan
- 80 — HTTP
- 443 — HTTPS
- 8080 — HTTP-Alt
- 8443 — HTTPS-Alt
- 8000 — HTTP-Dev
- 8888 — HTTP-Alt
- 3000 — Node/Dev
- 5000 — Flask/Dev
- 7001 — WebLogic
- 9000 — SonarQube
- 9090 — Prometheus
- 2082/2083 — cPanel
- 10000 — Webmin
Frequently asked questions
Related guides
Guide
Website Security Tips
A pragmatic checklist of the security wins that give the biggest reduction in risk for the least effort.
Read
Guide
HTTP Security Headers: A Practical Guide
Every HTTP security header explained in plain English, with production-ready examples for Nginx, Apache, Cloudflare, Express and WordPress.
Read
More tools
Want a full security review? Run a complete website audit.