What can the internet reach in your office?
Bots scan every address on the internet for open Remote Desktop, file shares and databases, and ransomware gangs use what they find. This connects from the internet back to the network you're on and tries the 14 services they look for most.
Scans the network this device is on right now. Run it from the office you want to check, not from home or mobile data.
It scans the network you're on
The scan only ever connects to the public address this page was loaded from, so you can only scan your own connection. Run it from each office, not from home or over mobile data. On a VPN, it scans the VPN's exit instead.
Limits
TCP only, one address, a fixed list of ports, and port 25 (email) can't be tested. It finds common exposures attackers look for; it isn't a full vulnerability scan. Your address and the results aren't stored or logged. To test one port you choose, use the open port checker.
How it works
When you start the scan, our server tries to open a TCP connection to the public address you are visiting from, on a fixed list of ports that attackers scan for: Remote Desktop, Windows file sharing, FTP, Telnet, SSH, VNC, common databases and admin panels. A port that accepts the connection is reachable by anyone on the internet. It only ever connects to your own address, once per scan, and neither the address nor the result is stored. Run it from inside each office, not over a VPN or mobile data.
Reading your result
- Nothing answered
- None of the risky services accepted a connection from outside. Run it again after any router, firewall or remote-access change.
- A high-risk service is open
- Remote Desktop, file sharing, a database or Telnet is reachable by anyone. Close the port forward first, then give people who need access a VPN or a gateway with two-step sign-in.
- An admin panel or SSH is open
- Check it is meant to be reachable. If it is, limit it to known addresses, turn off password logins where you can and keep the device updated.
Questions
Is it legal to scan my own network?
Yes. This scan can only reach the address you are connecting from, so it only ever tests your own connection. Don't use other tools to scan networks you don't own or manage.
Why is an open Remote Desktop port dangerous?
Automated bots try stolen and guessed passwords against every Remote Desktop server they find, all day. One weak password gives full control of that PC. Put it behind a VPN or a remote-access gateway instead of a port forward.
How do I close an open port?
Open the router or firewall, find the port forwarding (or NAT, or virtual server) rules and delete the one for that port, or turn off remote administration on the device. Then scan again. To test a single port, use the open port checker.