Ports reachable from the internet

We opened a TCP connection to each of ‹checked› well-known ports on ‹host› and recorded whether the handshake completed. Nothing was sent: where a banner appears below, it is the greeting the server volunteered first, which SSH, SMTP, FTP and MySQL all do. We never authenticated and never sent a protocol probe.

**What this check does not establish.** A completed handshake proves an endpoint accepted the connection. It does not prove that the software normally associated with that port is what answered — a proxy, a load balancer or a honeypot produces the same observation — which is why every exposure finding here is reported at high confidence rather than confirmed.

**What was not checked.** ‹checked› ports out of 65,535 — the count above is the real one, and it depends on the profile this scan ran under. Without proof that you own the domain we test a short fixed list of well-known ports; with ownership verified the list is extended to around a hundred (docs/research/threat-model-and-anti-abuse.md §3.2). A wider scan is noisy for the target and is prohibited by some hosting providers' terms, which is why the extension is gated rather than offered to everyone. A port not on the list is not reported closed — it is not reported at all.

Ports marked as deferring to another check are examined more deeply there: web ports by the HTTP and TLS checks, mail ports by the mail transport check, and DNS by the DNS health check.