Angry IP Scanner

Angry IP Scanner is a fast, cross-platform IP address and port scanner for administrators who need to see what is alive on a network segment right now. If you are looking for an Angry IP Scanner download, the current release is 3.10.0: free and open source under GPL-2.0, and it runs on Windows, macOS and Linux.

It does one job well. You give it a range, and it pings every address, resolves names, reads MAC addresses and checks the ports you care about. Then it hands you a table you can sort, filter and export. There is no agent, no database and no server component, which is why it stays in so many admin toolkits.

Angry IP Scanner at a glance

What it does

• Scans IP ranges, random addresses or a list of addresses loaded from a text file.
• Detects live hosts with ICMP echo, UDP or TCP probes. Without admin rights it falls back to UDP automatically.
• Collects hostname, TTL, MAC address and vendor, NetBIOS information and open or filtered TCP ports through modules it calls “fetchers”.
• Scans many hosts in parallel. Version 3.10.0 uses Java virtual threads by default.
• Exports results to CSV, TXT, XML, an IP:port list or SQL.
• Runs from the command line for scripted scans that write a file and exit.
• Accepts plugins (fetchers, feeders, pingers). Since 3.10.0 it asks you to confirm trust before loading a plugin.

How sysadmins use it

Find a new device on the LAN

1. Pick the IP Range feeder and enter the start and end address, or type a netmask such as /24.
2. Click Start. Since 3.10.0 the list shows alive hosts only by default.
3. Sort by MAC vendor or hostname to spot the new printer, camera or Raspberry Pi.
4. Colour codes: blue means the host answered; green means it answered and has open ports; red means no reply.

Check which hosts expose RDP or SSH

1. Open Tools > Preferences > Ports and set the port list, for example 22,80,443,3389.
2. Make sure the Ports fetcher is enabled under Tools > Fetchers.
3. Rescan, then sort by the Ports column. This gives you a fast audit of machines that should not have 3389 open to the whole VLAN.

Scheduled inventory scan from the command line

The CLI takes one feeder, one exporter and optional flags: -s to start the scan automatically, -q to quit after exporting, and -a to append instead of overwrite. The file extension picks the export format.

ipscan -f:range 192.168.10.1 192.168.10.254 -o C:scansvlan10.csv -s -q
ipscan -f:file hosts.txt -o hosts-result.xml -s -q

Put the first line in Windows Task Scheduler or cron. Comparing the CSV files over time shows which addresses appeared or disappeared.

Install and first run

Windows. The installer bundles a Java runtime (Java 25 in 3.10.0), so nothing else is needed. The stand-alone executable needs a 64-bit Java 21 or newer already installed. There is no 32-bit Windows build.

macOS. Separate bundles exist for Apple Silicon and Intel, both with Java included, so Rosetta is no longer needed. On first launch Gatekeeper may block the app. Allow it in System Settings > Privacy & Security.

Linux. Use the DEB package on Ubuntu, Debian or Mint, or the RPM on Fedora, RHEL or openSUSE. The packages add a menu entry. The JAR runs anywhere with Java 21+:

sudo apt install ./ipscan_3.10.0_amd64.deb
java -jar ipscan-3.10.0-linux64.jar

Gotchas. ICMP pinging needs administrator or root rights; without them the scanner uses UDP probes, and some devices then show as dead. Hosts behind a firewall that drops pings can look dead even with open ports. Change how dead hosts are handled in Preferences (so their ports are still scanned) if you need to catch them. Some antivirus products flag network scanners as “hacktool” or PUP. The project says this is a false positive, and the full source is public.

Limitations

• It is a discovery tool, not a monitor: no history, alerts or topology maps.
• It does not replace nmap for service fingerprinting, OS detection or scripting.
• MAC addresses only resolve for hosts in your own layer-2 segment; across routers you get the router’s view.
• No Android or iOS version from the project.
• Version 3.10.0 needs Java 21 or newer. The last release that ran on Java 8 was 3.7.6.
• Scanning networks you do not administer can break policy or law. Get permission first.

Angry IP Scanner vs alternatives

Advanced IP Scanner is free, runs on Windows only and adds one-click RDP, Radmin, shared-folder browsing, Wake-on-LAN and remote shutdown. It suits a Windows help desk; Angry IP Scanner wins when you need macOS, Linux or a scriptable CLI. NetCrunch Tools packages a ping scanner, port scanner, SNMP scanner and subnet tools in one Windows GUI. LANState goes further, adding a network map and ongoing availability checks.

FAQ

Is Angry IP Scanner free?

Yes. It is free and open source under GPL-2.0, with no paid edition, and you can use it at work.

Is Angry IP Scanner safe?

The source code is public on GitHub and builds are published by the project. Some antivirus engines flag it because it is a network scanner, not because it contains malware.

Is there an Angry IP Scanner portable version?

Yes, effectively. The Windows stand-alone executable (it needs Java 21+) and the macOS bundles run without an installer, and the JAR runs anywhere Java is present.

Does Angry IP Scanner work on Mac and Linux?

Yes. There are native bundles for Apple Silicon and Intel Macs, plus DEB, RPM and JAR packages for Linux, including Kali and Ubuntu.

What does the blue dot mean in Angry IP Scanner?

Blue means the host responded but no scanned ports are open. Green means it responded and has open ports; red means it did not respond.

How do I show MAC addresses?

Enable the MAC Address (and optionally MAC Vendor) fetcher under Tools > Fetchers. It works for hosts in the same local subnet.

Angry IP Scanner vs nmap: which should I use?

Use Angry IP Scanner for a quick visual sweep and an exportable table. Use nmap when you need service versions, OS detection, NSE scripts or precise control over scan techniques.

Is there an Angry IP Scanner for Android?

No. The project only builds for Windows, macOS and Linux; Android apps using the name are not from angryip.org.

Last checked against official sources: 30 September 2026 (developer website: angryip.org). Versions and licence terms change — confirm on the developer's site before deploying in production.