Why is leaving database ports (3306, 5432) open dangerous?

Exposing relational databases (MySQL, PostgreSQL) directly to the public internet leaves them vulnerable to credential brute-forcing, SQL injection, automated ransomware attacks, and direct data exfiltration. CERT-In mandates that all database engines must be bound exclusively to localhost or internal private subnets.

What does a "FILTERED" port status mean?

A Filtered status indicates that network packets are being silently dropped by an active packet filter, hardware firewall, or cloud security group, preventing direct connection without sending back a rejection packet.

Is this port scanner safe to run against production servers?

Yes. CyberCheck India performs standard, non-intrusive TCP socket connection handshakes with immediate termination upon acknowledgment. It does not perform invasive vulnerability probing, buffer overflows, or denial-of-service traffic.

100% Free Non-Intrusive TCP Diagnostic • Fast & Safe

Open Port Scanner & Firewall Diagnostic

Test 17 common internet ports (HTTP, HTTPS, SSH, FTP, MySQL, RDP, PostgreSQL) for unintended public exposures and assess perimeter hardening under CERT-In and GIGW 3.0 standards.

Quick Test:

Open vs Closed vs Filtered

An Open port accepts TCP handshakes. A Closed port receives packets but has no active listening service. A Filtered port indicates an active firewall is dropping probe traffic.

Cleartext Protocol Vulnerabilities

Legacy unencrypted protocols like FTP (21) and cleartext mail (110, 143) transmit credentials and administrative files without encryption, exposing systems to sniffing attacks.

GIGW 3.0 Compliance

Guidelines for Indian Government Websites (GIGW 3.0) Chapter 9 mandates that all citizen web traffic must run on encrypted HTTPS (Port 443) with TLS 1.2 or 1.3 enforced.