TCP Port Range Scanner

Scan range is capped at 500 ports. Only scan hosts you own or have permission to probe.
Next

Enter a public hostname or IP and a consecutive port range. Our server attempts a TCP connection to every port in order, with a one-second timeout per port, and lists only the connections that succeed. It does not classify or display failed ports.

How the range scan works

  1. 1

    Validate the public host

    DNS must resolve, and every returned address must be public; private and reserved targets are rejected.

  2. 2

    Choose a consecutive range

    Ports are limited to 1–65535. Because the implementation compares the difference between endpoints, a range can contain at most 501 ports inclusive.

  3. 3

    Wait for sequential checks

    Ports are attempted one after another with a one-second timeout each. A large filtered range can therefore take several minutes.

  4. 4

    Review accepted connections

    Only open TCP ports appear. An empty result can also mean refusals, timeouts, filtering, routing errors or no accepted connections.

Result boundaries

Capability Included?
TCP connect from the application server Yes
Consecutive user-selected range Yes, up to 501 ports inclusive
List accepted connections Yes
Show closed, filtered or errored ports No
UDP, SYN/stealth scan, banner or version detection No
Private/LAN targets or a scan from your own device No

“Open” means a TCP connection from this server was accepted at scan time. It does not identify the application behind the port or prove that it is safe. Likewise, no listed ports does not prove that every port is closed: filters and timeouts are omitted too.

Time and range examples

Start–end Ports attempted Worst-case timeout pattern
80–80 1 about 1 second
1–100 100 about 100 seconds
1000–1500 501 about 501 seconds

Actual duration can be shorter when connections are accepted or refused quickly. Checks are sequential, not concurrent.

Safe use and exposure

Scan only hosts you own or are authorized to test. Connection attempts may appear in the target’s firewall and service logs. The host and range are server fields; the step-by-step flow also puts them in the URL. Executions are logged with the host and range. This tool cannot guarantee a firewall diagnosis or a full internet exposure audit.

Frequently Asked Questions

The component stores and displays only successful TCP connections. Failed, refused and timed-out attempts are omitted.

Each port is checked sequentially and may wait up to one second. A silent range of 501 ports can take roughly 501 seconds.

No. It does not read banners or fingerprint protocols and versions. A port number alone cannot prove which service is running.

Not by private address. The server rejects private and reserved targets and connects only to public internet hosts.

No. Host and range are sent to the server, logged for the execution and, in funnel mode, placed in the page URL. The target may also log the connections.

Related Tools

Tool available in other languages