TCP port scan
port_scanRun a real server-side TCP connect scan against a public host. Each port comes back as open (handshake completed), closed (refused/reset), filtered (no response, likely firewalled) or blocked (Cloudflare blocks outbound to that port, e.g. 25/SMTP). With no ports argument a curated common-port catalog is scanned. Private, reserved and internal addresses are rejected. Only scan hosts you are authorized to test. Rate limited to 20 requests/minute and can take 20+ seconds.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Public hostname or IP to scan, e.g. example.com. Required — do not scan third parties without permission. | |
| ports | No | Optional comma-separated port list. Omit to scan the common-port catalog. |