Scans TCP ports and reports which services are listening, flagging the ones that should not be reachable from the internet. It ships a compiled Go engine (plugin_bin) for concurrent scanning and falls back to a Python implementation when the binary has not been built — nmap if it is installed, otherwise ss/netstat for a local-only listen list. A full scan takes a target and a port range (default 1-10000); without a target it scans the server's own public IP, which it resolves via api.ipify.org and falls back to the outbound interface address.

Results are matched against a fixed table of roughly two dozen risky ports — SSH, Telnet, SMB, RDP, VNC, and unauthenticated-by-default services such as MySQL, PostgreSQL, Redis, Elasticsearch, Memcached and MongoDB — and each hit comes back with a severity (info, warning or critical) and a short recommendation. Well-known ports are labelled with their usual service name, and nmap scans also surface version/banner information where nmap detects it.

The UI is a single page: run a scan, read the table of open ports. There is no scheduling, no history, and no comparison against previous scans — each run stands on its own. Remote scanning and version detection need nmap present on the server; without it the plugin can only report what is listening locally.

Min Panel Version

1.0.0

Platform

Ubuntu 20.04+ / 22.04+ / 24.04+

License

Free — no key needed

VinzaPanel handles installation automatically via the Vinza Store. Make sure the panel agent has internet access to download dependencies.

1.0.3 — Expected-ports baseline: save the current open ports and see new or closed ports on every local scan. Scheduled local scans alert the admin (bell and alert channels) once per newly opened port. "Close" on a scan result adds a deny rule to the panel firewall after confirmation; SSH and the panel port are never closed. 1.0.2 — Updating keeps the scanner engine for this server's architecture; on arm64 every scan failed after an update. 1.0.1 — The page works: its actions (status, scan, local scan) were refused with "not available on this plugin". Target and port range are validated. 1.0.0: Initial release. nmap + ss fallback, dangerous port detection, service identification.

Use VinzaPanel's REST API to download and install this app programmatically.

Download app files

HTTP

POST /plugins/api/download/port-scanner/
Content-Type: application/json

{
  "panel_version": "1.0.0"
}

Example response

JSON

{
  "success": true,
  "plugin_id": "port-scanner",
  "version": "1.0.3",
  "download_url": "..."
}