Free Network Exposure Checker
See which ports and services your server exposes to the internet — and which of them are worth a second look.
Free network exposure checker
This tool shows what your server looks like from the outside — which ports are open, which services answer on them, and whether any known vulnerabilities are associated with the host. The data comes from Shodan, which continuously scans the public internet.
Which open ports are normal?
Ports 80 (HTTP) and 443 (HTTPS) are open on every running website — seeing them is expected, not a problem. What deserves a second look are services meant for administrators rather than visitors:
- 21 (FTP) and 23 (Telnet) — send credentials unencrypted.
- 22 (SSH) and 3389 (RDP) — remote access; fine if deliberate and hardened, worth restricting to known addresses.
- 3306 (MySQL), 5432 (PostgreSQL), 6379 (Redis), 27017 (MongoDB), 9200 (Elasticsearch) — databases are rarely meant to be reachable from the internet.
What this tool does not do
Nothing is sent to your server: the lookup only reads what Shodan already recorded, so it is not a port scan and leaves no trace in your logs. Results are cached for one hour.
Keep an eye on it continuously
A port that opens next month is the one that matters. Testomato's monitoring checks your site's external exposure every night on paid plans and alerts you when a new service appears.
Get alerted when a new port opens on your server
You can try it all free for 14 days with no credit card and no commitment.