What Is Port Monitoring?
Port monitoring checks which network services are visible from the Internet. It helps you find exposed services, unexpected changes and unnecessary attack surface before someone else notices them.
What Is a Network Port?
A port is a software-defined communication endpoint associated with a network service on an IP address. Ports help systems distinguish between different services running on the same host.
How Do Ports Work?
When a client connects to a service, it uses an IP address together with a port number. Common web traffic normally uses TCP port 80 for HTTP and TCP port 443 for HTTPS.
IP address + port → network service
For example, a web server may expose TCP 443 for HTTPS while a separate service uses another port.
What Do Open, Closed and Filtered Mean?
A port scanner reports what it can observe from its scanning position. The result can depend on firewalls, routing and the type of scan being used.
Open
An application is listening and accepting connections or packets on the port.
Closed
The port is reachable, but no application is currently listening on it.
Filtered
A firewall or other packet filter prevents the scanner from determining whether the port is open or closed.
Open or Filtered
The scanner cannot determine with confidence whether the port is open or being filtered.
Which Ports Are Commonly Exposed?
Some ports are commonly associated with widely used services. Their presence is not automatically a problem; what matters is whether the service is intentional, necessary and properly secured.
80/TCP - HTTP
Commonly used for unencrypted HTTP web traffic and often redirected to HTTPS.
443/TCP - HTTPS
Commonly used for encrypted HTTPS web traffic.
22/TCP - SSH
Commonly used for remote administration of Linux and Unix systems. It should be intentionally exposed and properly secured.
Mail Ports
Mail services may use several TCP ports, depending on the service and protocol. Only the ports actually required by your mail setup should normally be exposed.
Why Do Open Ports Matter?
Every externally reachable service provides another network entry point that must be maintained and protected. An unnecessary service increases the amount of infrastructure that has to be secured and monitored.
Does an Open Port Mean a Vulnerability?
No. An open port tells you that a service is reachable; it does not by itself prove that the service is vulnerable. Security depends on the application, version, configuration, authentication, firewall rules and other protections.
Why Are Unexpected Open Ports Important?
A newly exposed port may indicate a new service, a configuration change, an application deployment, a firewall change or activity that the administrator did not intend. Detecting the change quickly can make investigation much easier.
Why Monitor Ports From the Internet?
A server can look secure from inside its own network while exposing a service to the public Internet through a router, firewall rule, NAT configuration or cloud security policy. External monitoring shows what a remote system can actually observe.
TCP vs. UDP Port Monitoring
TCP and UDP use ports differently. TCP establishes connections, while UDP sends datagrams without the same connection process. Because of these differences, UDP scanning can produce results such as open|filtered when the scanner cannot determine the exact state.
Why Monitor for Port Changes?
A service that was not publicly reachable yesterday may become reachable after a deployment or configuration change. Change monitoring lets you investigate unexpected exposure before it becomes a forgotten part of the Internet-facing attack surface.
How Often Should Ports Be Checked?
Public exposure can change whenever infrastructure or firewall configuration changes. Regular automated checks are useful because they can detect new exposure without requiring someone to remember to run a manual scan.
How Viglar Monitors Ports
Viglar performs external checks against the infrastructure associated with your monitored domain and looks for network services that are visible from the Internet. The goal is not simply to tell you that a port is reachable, but to alert you when exposed services or unexpected port changes deserve investigation.
Know what your server exposes
Monitor uptime, SSL, DNS, security headers, reputation, ports, domains and more from outside your infrastructure.
Run a Quick Check