Port a Potty

Ports are the numbered doors into your device. See which ones are open, how attackers use them, and how to close them.

Example log analysis · add the helper to check your own computer · Rescan

Local device helper

OPTIONAL

Run the downloadable helper on a Windows PC or Mac to show that computer's open ports, listening programs and built-in protections here. It only reads; it never changes your settings.

Downloads a ZIP with the helper and a connection file just for this browser. Windows: extract it and double-click the EXE. Mac: follow the steps that appear after downloading.

Download the helper to connect automatically, or paste an existing helper pairing ID.

Threat summary

0 potential threats found in the example log · 0 to fix, 0 to review · 0 ports in normal use · 1 of 4 checks clear

How to read the colors

Risk
Something dangerous is open or turned off, or an attack sign was found. Fix these first.
Review
Probably needed, but worth a look: a risky port an app uses, or an unrecognized program other devices can reach.
In use
A recognized app or OS feature needs this port. Normal; close it only if you don't use that feature.
Safe
Closed, only reachable from this computer, or a protection that's turned on.
Unknown
Couldn't be checked on this system, usually because it needs admin rights.
Local Port Assessor – Needs helper Connect the helper to check your computer
Listening Services – Needs helper Connect the helper to check your computer
IOC / CVE Analyzer 0 Safe 0 risk · 0 review · 0 in use
System Hardening – Needs helper Connect the helper to check your computer
Potential threats by check Risk + review items in each check
  • IOC / CVE Analyzer 0
Everything checked, by status 1 items across 1 checks
  • Risk 0
  • Review 0
  • In use 0
  • Safe 1
  • Unknown 0

IOC / CVE Analyzer

Example data Safe

Reads an example security log to show what password-guessing attacks look like, and flags open ports tied to famous vulnerabilities (CVEs)

Static example file: normal_activity.log (Normal SSH activity)

This is a static example file bundled with Port a Potty. The attackers, addresses and accounts in it are made up so you can safely see what real attacks look like. It is not your device's log.

Or analyze your own log file
SSH-style UTF-8 .log or .txt, up to 512 KB. The newest 8 uploads stay available.

No signs of attack found in the example log

On this website the port-to-CVE check is skipped, because the site runs on a cloud server, not your device. Open "How attackers use this port" on any port finding to see its famous vulnerabilities.

Check this device: no download

Websites can't look at a device's open ports (browsers keep sites sandboxed, which protects you), so this is a guided check instead. It works on phones too. Pick your device and tick off each step.

iPhones keep almost no ports open to other devices, and apps can't run servers in the background, so the main risks are sharing features and outdated software.

0 of 5 steps done

Common ports explained

Attackers run automated scanners that can check the entire internet in under an hour, knocking on every door and trying the ones that open. An open port is only as safe as the program behind it. These five habits keep your doors shut:

  1. Close what you don't use. Every open port is a program waiting for strangers to talk to it. A closed port can't be attacked at all.
  2. Turn on automatic updates. Most big attacks, like WannaCry, used bugs that already had a fix. Updates close those holes.
  3. Keep the firewall on. The firewall decides which doors other devices may knock on. Windows and macOS both include one.
  4. Replace default passwords. Botnets like Mirai simply log in with factory passwords. Use long, unique passwords and turn on MFA.
  5. Be careful on public Wi-Fi. Everyone on the same network can reach your open ports. Choose "Public network" and turn off sharing.