Scan Ports and IP Addresses with Angry IP Scanner

Angry IP Scanner is a lightweight, cross-platform network scanner that quickly identifies which IP addresses on a network are active and which ports are open on those hosts. You enter an IP range, press Start, and the tool pings each address, optionally checks a set of ports, and displays the results in a sortable table. This article explains how to use it effectively, interpret the results, and avoid common pitfalls.

What Angry IP Scanner Actually Does

Angry IP Scanner (also called ipscan) is an open-source utility written in Java. It performs two basic checks on each IP address in a range:

• Host discovery – sends an ICMP echo request (ping) and optionally a TCP ping to see if the host responds.
• Port scanning – attempts TCP connections to a list of ports you specify, recording which ones accept a connection.

It is not a vulnerability scanner. It does not exploit weaknesses or identify the operating system or services running on a port. It only tells you that a host is alive and that a port is open, which is the first step in network mapping.

How to Install and Launch It

Angry IP Scanner runs on Windows, macOS, and Linux. You download the appropriate package from the official website (angryip.org) or from your package manager if you use Linux. Since it requires Java, you may need to install a Java runtime (JRE) if you don’t already have one. The Windows installer bundles a Java runtime, so it works out of the box. On macOS, you may need to right-click the app and select Open the first time because of Gatekeeper. On Linux, you can run the .deb or .rpm package, or use the portable zip.

Scanning an IP Range Step by Step

Here is the typical workflow:

1. Enter the IP range in the “IP Range” field. You can use formats like 192.168.1.1-254 or 192.168.1.0/24. The tool expands the range automatically.
2. Choose the port list – by default, it scans a few common ports (e.g., 80, 443, 22, 21). You can edit the list in the “Ports” tab or type a custom list like 80,443,8080 or a range 1-1000.
3. Set the scan method – the default is “Ping + port scan”. You can change it to “Ping only” (just host discovery) or “Port scan only” (if you already know hosts are up).
4. Press Start – the scan runs asynchronously, and results appear in the table as they are found.
5. Stop when done – press Stop to halt the scan early, or wait for it to finish.

You can also scan a single IP by entering just that address (e.g., 192.168.1.1). The tool treats it as a one-host range.

Interpreting the Results Table

Each row in the results table shows an IP address. Columns include:

• IP – the address scanned.
• Ping – reply time in milliseconds, or “timeout” if no response.
• Ports – a list of open ports found (e.g., “80,443”).
• Hostname – reverse DNS name if available.
• MAC – hardware address if the host is on the same local network and responds to ARP.
• Response time – how long the host took to respond.

A green dot indicates the host is alive and responded to ping. A red dot means no response. If you only did a port scan, the host may appear as “down” if it doesn’t respond to ping, but ports may still be open. In that case, look at the “Ports” column – if it lists something, the host is up even if ping failed.

Common Problems and How to Fix Them

Users often encounter a few issues:

• No hosts found – Your computer may be on a different subnet, or the firewall blocks ICMP. Try scanning your own IP first to verify the tool works. If you are scanning a remote network, you need permission and the correct range.
• Port scan shows nothing – Many hosts block unsolicited connections. Also, some ports are filtered by firewalls, so a “closed” response might actually be a filtered port. Angry IP Scanner only reports open ports (connection succeeded).
• Scan is slow – Scanning a large range with many ports takes time. Reduce the range or use fewer ports. You can also increase the number of threads in the “Scan” menu → “Threads”. Default is 100; you can raise it to 1000 on a fast machine.
• Java errors – If you get a “Java not found” error, install a Java runtime (JRE) from a trusted source like Adoptium. The Windows installer usually includes it, but if you use the portable version, you need Java separately.

Angry IP Scanner vs. Nmap

Nmap is the gold standard for network scanning, but it has a steeper learning curve. Angry IP Scanner is simpler and graphical, making it ideal for quick checks. Nmap offers OS detection, service version detection, and scripting, which Angry IP Scanner lacks. For a home user who just wants to see what devices are on their Wi-Fi, Angry IP Scanner is sufficient. For a penetration tester, Nmap is the better tool. Both are free and open-source.

Ethical and Legal Considerations

Scanning networks without permission is illegal in many jurisdictions and against the terms of service of most ISPs. Always ensure you have explicit authorization to scan a network. For personal use, scan your own home network or a lab environment. If you are scanning a corporate network, get written permission from the network administrator. Unauthorized scanning can be considered a cyberattack, leading to legal consequences. This article is for educational purposes only.

Frequently Asked Questions

Does Angry IP Scanner work on Mac?

Yes, it runs on macOS. Download the .dmg file from the official site, drag the app to your Applications folder, and right-click to open it the first time. You may need to allow it in System Preferences → Security & Privacy if macOS blocks it.

Can I scan a single IP address?

Yes, enter just the IP address (e.g., 192.168.1.1) in the IP Range field. The tool will treat it as a one-host range.

What ports are scanned by default?

The default port list includes common ports like 21 (FTP), 22 (SSH), 23 (Telnet), 25 (SMTP), 80 (HTTP), 110 (POP3), 143 (IMAP), 443 (HTTPS), 3389 (RDP), and a few others. You can edit this list in the Ports tab.

Why does the scan show a host as “down” but ports are open?

Some hosts block ICMP ping requests but still accept TCP connections. Angry IP Scanner will show the host as “down” if ping fails, but if a port scan is enabled and a port responds, it will list those ports. Look at the Ports column to see if any are open.

Is Angry IP Scanner safe to use?

Yes, the tool itself is safe, but scanning networks without permission is not. Always get authorization before scanning any network that you do not own. The scanner only sends pings and connection attempts; it does not exploit vulnerabilities.

Can I export the scan results?

Yes, you can export the results to a CSV, TXT, or XML file by going to File → Export. This is useful for documenting your network inventory.

Related

• Print to Envelope: Sites & How to Do It
• Avoid Inbox Clutter: Spam Reduction Guide
• 200 HD Films in 1 Second with BTS? Truth