# portscan.com > Free online port scanner. Check which TCP ports are open on an IP address from outside the network. portscan.com is a free, browser-based port scanning tool. Users scan the IP address they are currently connecting from. The scan target is always determined server-side from the connection. No input field exists for specifying a target IP. Only self-initiated scans are possible. ## Scan modes ### Fast scan (about 20 seconds once started) Checks 30 TCP ports: 21 (FTP), 22 (SSH), 23 (Telnet), 25 (SMTP), 53 (DNS), 80 (HTTP), 110 (POP3), 135 (MSRPC), 139 (NetBIOS), 143 (IMAP), 443 (HTTPS), 445 (SMB), 587 (SMTP submission), 993 (IMAPS), 995 (POP3S), 1433 (MSSQL), 2375 (Docker API), 3306 (MySQL), 3389 (RDP), 5000 (HTTP-alt), 5432 (PostgreSQL), 5900 (VNC), 6379 (Redis), 6443 (Kubernetes API), 8080 (HTTP-alt), 8443 (HTTPS-alt), 9090 (Prometheus), 9200 (Elasticsearch), 11211 (Memcached), 27017 (MongoDB). Port 25 (SMTP) is included (many cloud-hosted scanners block outbound port 25). When the scanner queue is busy, extra waiting time can occur before the scan starts. ### Deep scan (typically 60-300 seconds once started) Scans all 65,535 TCP ports with service version detection (nmap-style). ## Port states - Open: a service is listening and accepts the connection - Closed: no service is listening; the host actively rejects the connection - Filtered: packets are dropped or no reply (typical behind a firewall or NAT) Unexpected open ports can mean misconfiguration, a forgotten app, or (less often) unwanted software that listens inbound; the tool reports reachability only and does not detect malware. Match open ports to known services or local documentation, or involve IT support when unsure. ## Product features - Own-IP enforcement (target cannot be overridden; not designed for scanning third parties) - IPv4 and IPv6 - No signup, no account, no API key for the public API - No advertising and no behavioural tracking pixels - No first-party cookies on the homepage and API; security-related cookies may be set by infrastructure (e.g. Cloudflare) where necessary - Privacy-oriented aggregate analytics on public pages (self-hosted Plausible; no cross-site tracking or advertising use - see https://portscan.com/privacy) - Self-service opt-out and CIDR range requests (see Opt-out below) - Published scanner IPs with forward-confirmed reverse DNS (FCrDNS); plaintext list at https://portscan.com/scanner-ips.txt - German law, Berlin jurisdiction; processing described under https://portscan.com/privacy and https://portscan.com/terms ## API Free anonymous API. No API key. Same own-IP rule: the scanned IP is always the address the request originates from (e.g. a server's egress IP for server-to-server calls, or a workstation's public IP when run locally). - POST https://api.portscan.com/v1/fast - start fast scan - POST https://api.portscan.com/v1/deep - start deep scan - GET https://api.portscan.com/v1/fast - poll fast scan result - GET https://api.portscan.com/v1/deep - poll deep scan result Optional: POST may include `X-Callback-Url` for a webhook when the scan completes. Full detail: https://api.portscan.com/ Rate limits (see API docs): fast scan 2000 per ASN per hour; deep scan 1 per IP per 5 minutes and 200 per ASN per hour; edge 30 requests per IP per minute. HTTP 429 with `Retry-After` when limited. ## Opt-out - Single IP: self-service at https://portscan.com/optout (1-year exclusion) - CIDR / network ranges: email optout@portscan.com (manual review; policy and retention in https://portscan.com/privacy) ## Pages - https://portscan.com/ - Homepage, port scanner - https://portscan.com/ports - TCP port reference - https://portscan.com/abuse - Abuse contact and scanner verification - https://portscan.com/optout - Self-service IP opt-out - https://portscan.com/scanner-ips.txt - Scanner IP list (plain text) - https://api.portscan.com/ - API documentation - https://api.portscan.com/openapi.json - OpenAPI 3.1 spec - https://portscan.com/terms - Terms of Service - https://portscan.com/privacy - Privacy Policy - https://portscan.com/impressum - Impressum (German legal notice) ## Scanner Scans run with nmap on a dedicated VPS. FCrDNS verified. Odd-numbered scanner hostnames are used for IPv4, even-numbered for IPv6. Scanner IPs: - 149.210.169.71 (IPv4, PTR scanner01.portscan.com) - 2a01:7c8:aaac:f7:5054:ff:fe6d:47ce (IPv6, PTR scanner02.portscan.com) - 136.144.206.124 (IPv4, PTR scanner03.portscan.com) - 2a01:7c8:d001:50:5054:ff:fe14:f737 (IPv6, PTR scanner04.portscan.com) - 57.128.160.156 (IPv4, PTR scanner05.portscan.com) - 2001:41d0:801:1000::fc6 (IPv6, PTR scanner06.portscan.com) - 57.128.28.130 (IPv4, PTR scanner07.portscan.com) - 2001:41d0:404:400::99d (IPv6, PTR scanner08.portscan.com) ## Data retention (summary) Audit logs are retained 180 days for abuse prevention and legal defence (lawful basis under DSGVO includes legitimate interests; details in https://portscan.com/privacy). ## Contact - Legal / Impressum-related: contact@portscan.com - Privacy / data subject requests: privacy@portscan.com - Abuse reports: abuse@portscan.com - Opt-out (ranges): optout@portscan.com - Operator website: https://fili.com ## Operator Fili Wiese - Enterprise Technical SEO Consultant, Berlin, Germany. 20+ years experience including 7 years on Google's Search Quality and Trust & Safety teams.