Search

Find Open ports and services from a domain

Domain NameOpen Ports

Have a domain? These OSINT tools take a domain as input and return open ports and services. 27 tools in our catalogue make this exact pivot — compare them by pricing, platform, and what they output, then chain the results into the next step of your investigation.

27tools
All Domain Name tools
Censys icon

Censys

Internet asset and certificate search engine

FreemiumWebAPI
IN
OUT+1
FOFA icon

FOFA

Internet asset search and mapping engine

FreemiumWebAPI
IN
OUT+1
Nmap icon

Nmap

Network mapping and port scanning tool

FreeOSSCLI
IN
OUT
Shodan icon

Shodan

Search exposed internet-connected services

FreemiumWebAPI
IN
OUT+2
ZoomEye icon

ZoomEye

Cyberspace search engine for exposed assets

FreemiumWebAPI
IN
OUT+1
BBOT icon

BBOT

Recursive multi-source recon scanner

FreeOSSCLI
IN
OUT
BinaryEdge icon

BinaryEdge

Paid internet-scan and asset discovery API

FreemiumWebAPI
IN
OUT
Censys Search Pro icon

Censys Search Pro

Censys attack-surface management platform

PaidWebAPI
IN
OUT
Criminal IP icon

Criminal IP

CTI search engine scoring IPs and domains for threats

FreemiumWebAPI
IN
OUT+2
Driftnet icon

Driftnet

Internet-scan intelligence for domains and IPs

FreemiumWebAPI
IN
OUT+2
FullHunt icon

FullHunt

Attack-surface platform mapping a domain's exposed subdomains, IPs and services

FreemiumWebAPI
IN
OUT+2
Hunter.how icon

Hunter.how

Search engine for internet-exposed hosts and devices

FreemiumWebAPI
IN
OUT
LeakIX icon

LeakIX

Exposed-database and misconfig search engine

FreemiumWebAPI
IN
OUT
Naabu icon

Naabu

a fast port scanner designed for reliable host and service discovery

FreeOSSCLI
IN
OUT
Netcat icon

Netcat

TCP/UDP networking utility

FreeOSSCLI
IN
OUT
Netlas.io icon

Netlas.io

Internet scan search engine for hosts, DNS, certs and WHOIS

FreemiumWebAPI
IN
OUT+3
ONYPHE icon

ONYPHE

ONYPHE internet-wide scanning platform

FreemiumWebAPI
IN
OUT
Pentest-Tools.com icon

Pentest-Tools.com

Hosted pentest scanner SaaS

FreemiumWebAPI
IN
OUT
Quake icon

Quake

Qihoo 360 internet-asset search engine

FreemiumWebAPI
IN
OUT
Smap icon

Smap

Passive Nmap replacement using Shodan data

FreeOSSCLI
IN
OUT
Uncover icon

Uncover

a query tool that aggregates results from internet-wide search engines and as

FreeOSSCLI
IN
OUT
WebScout icon

WebScout

IP and host intelligence for threat research

FreemiumWebAPI
IN
OUT
You Get Signal icon

You Get Signal

Reverse IP domain check, open ports and traceroute

FreeWeb
IN
OUT
Zabbix icon

Zabbix

Open-source infrastructure monitoring

FreeOSSWebCLI
IN
OUT
cloud_enum icon

cloud_enum

Enumerate public AWS, Azure and GCP storage by keyword

FreeOSSCLI
IN
OUT
hping3 icon

hping3

Packet crafting and network testing

FreeOSSCLI
IN
OUT
reNgine icon

reNgine

Automated recon framework with web UI

FreeOSSWebCLI
IN
OUT

From domain name, also find…

Report / Summary110IOC (Indicator of Compromise)104DNS Records72URL65Subdomain63Technology Stack47Website42CVE / Vulnerability38

Find open ports from other data

IP Address27IP Range / CIDR9
All OSINT use cases & data types