Office Perimeter Scan
Check your office's internet connection from the outside for services that should not be reachable from the internet, such as Remote Desktop, Windows file sharing and router admin pages.
Scan your office connection
Run it from a computer at the office. We detect the connection you are using and check only that address, after you agree. Your website is most likely hosted elsewhere and is not part of this scan.
Sign in to run a scan.
Sign in203.0.113.24
Office connection · scanned October 23, 2026 1:14pm EDT
What we found and how to fix it
Anyone on the internet can try to sign in to a computer in your office. Exposed Remote Desktop is one of the most common ways ransomware gets into small offices.
Fix: Remove the port-forwarding rule for 3389 on your router. Use a VPN or a remote-access tool with MFA instead. Step-by-step guide →
This is often the router's or a device's admin page, which should not be reachable from the internet.
Fix: Turn off remote (WAN) management on the router, or remove the port-forwarding rule. Step-by-step guide →
This is often your firewall's VPN sign-in page (fine if you use it) or its admin page (which should not be reachable from the internet).
Fix: If it is your VPN, keep the firewall's firmware up to date and require MFA. If it is an admin page, turn off remote (WAN) management. Step-by-step guide →
Open services
| Port | Service (as reported) | State |
|---|---|---|
| TCP 3389 | ms-wbt-server | Open to the internet |
| TCP 80 | http | Open to the internet |
| TCP 443 | https | Open to the internet |
What this covers: one office internet address, checked from the internet on these TCP ports: 21, 22, 23, 25, 53, 80, 110, 135, 139, 143, 389, 443, 445, 465, 587, 993, 995, 1433, 1723, 3306, 3389, 4443, 5060, 5900, 8080, 8291, 8443, 10443. It does not test your website, your computers' settings, Wi-Fi or anything inside your network, and a clean result is not a guarantee that nothing is exposed. Re-scan after any router, firewall or phone-system change.