Can I scan a remote server on the internet, or only local devices?

Both. You can enter any reachable hostname or IP — a local router address like 192.168.1.1 or a public server. Just note that many public hosts block unsolicited port probes at the firewall level, so you may see most ports as filtered rather than truly closed.

How long does a full port scan take?

It depends on the range and network latency. Common presets (20–30 ports) usually finish in a few seconds. Scanning all 65535 ports over a slow connection can take several minutes, so start with a targeted range for faster results.

Does this tool need any special permissions?

No. TCP-connect scanning uses the standard network socket API — no root or special OS permissions are required.

What does 'filtered' mean versus 'closed'?

'Closed' means the host responded and actively refused the connection. 'Filtered' means no response arrived — typically because a firewall is silently dropping packets. A service is only running on ports that show as 'open'.

Port Scanner

APP

Scan a host for open TCP ports.

Best on the app

Port Scanner needs your phone's hardware

Raw TCP port scanning isn't possible in a browser. Download Carbide free to use it — plus all 111 tools, fully offline.

SCAN TO INSTALL

What it does

Port Scanner lets you check which TCP ports are open on any host — whether that's a server, router, NAS, or any networked device. Enter a hostname or IP address, specify a port range or pick from common presets (HTTP 80, HTTPS 443, SSH 22, FTP 21, and more), and Carbide scans each port with a direct TCP-connect probe. Results stream in live, showing each port as open, closed, or filtered so you can diagnose firewall rules, verify a service is actually listening, or audit what your own machine is exposing. Everything runs entirely on your device — no cloud relay, no sign-up, completely free. It's the kind of quick network audit that used to require a laptop and terminal; now it's in your pocket.

How to use the Port Scanner

Open Port Scanner from the Networking category.
Enter a hostname (e.g. 192.168.1.1) or domain name in the host field.
Choose a port range or select a preset (Common, Web, or All).
Tap Scan and watch results stream in — each port is marked open, closed, or filtered.
Tap any result row to copy the port number or see more detail.

Frequently asked questions

Can I scan a remote server on the internet, or only local devices?: Both. You can enter any reachable hostname or IP — a local router address like 192.168.1.1 or a public server. Just note that many public hosts block unsolicited port probes at the firewall level, so you may see most ports as filtered rather than truly closed.
How long does a full port scan take?: It depends on the range and network latency. Common presets (20–30 ports) usually finish in a few seconds. Scanning all 65535 ports over a slow connection can take several minutes, so start with a targeted range for faster results.
Does this tool need any special permissions?: No. TCP-connect scanning uses the standard network socket API — no root or special OS permissions are required.
What does 'filtered' mean versus 'closed'?: 'Closed' means the host responded and actively refused the connection. 'Filtered' means no response arrived — typically because a firewall is silently dropping packets. A service is only running on ports that show as 'open'.

Take Carbide everywhere

All 111 tools, offline, on iOS & Android — free.