Which ports are open that should not be?

How can we tell that open ports are not already cloaked? (or can we?)

.: Aftiel