Understanding the three results
- Open: a service accepted the TCP connection. The port is reachable from the internet.
- Closed: the host answered with a refusal (TCP RST). The machine is reachable but nothing listens on that port.
- Timeout / filtered: no answer at all within 3 seconds. A firewall is dropping packets, or the host is down.
Common ports to test
22 SSH, 25 SMTP, 53 DNS, 80 HTTP, 110 POP3, 143 IMAP, 443 HTTPS, 465/587 SMTP submission, 993 IMAPS, 3306 MySQL, 5432 PostgreSQL, 6379 Redis, 8080 alternative HTTP. As a rule, databases and admin interfaces should not be open to the whole internet — if this tool shows them open, restrict them.
Testing port 443? Follow up with the SSL checker to verify the certificate being served.