Open Ports Lookup
See which ports and services an IP address or hostname exposes to the internet, with known CVEs — without scanning it.
Frequently Asked Questions
Does this tool scan the target?
No. It looks up results from existing internet-wide scans that are published as a public dataset. No packets are sent to the IP address or hostname you enter, so it is passive in the same way as reading DNS or certificate logs.
How current is the data?
The scan data is refreshed roughly weekly and covers commonly scanned ports, so a port opened or closed in the last few days may not be reflected yet. To check a change you just made, test from outside your network with your own tools.
What does a "risky" port mean?
Some services are frequently attacked when reachable from the internet: databases such as MySQL, PostgreSQL, Redis and MongoDB, remote access such as RDP, VNC and Telnet, file sharing such as SMB, and management APIs such as Docker or Kubernetes. These are flagged so you can confirm they are meant to be public.
Where do the CVEs come from?
They are matched from the software versions the scanners detected. A listed CVE means the detected version is known to be affected; it does not prove the host is exploitable, since patches can be backported or the version detection can be wrong. Open a CVE to see its details in the CVE Explorer.
Why does a hostname show several IP addresses?
Many sites resolve to more than one address for load balancing or redundancy. The tool looks up to four public IPv4 addresses. Private and reserved addresses are never looked up.
Is there a limit?
Yes. To prevent the tool being used to sweep address ranges, each IP address can make 3 lookups per minute and 20 per hour. Results for an address are cached for a few hours.