Angry IP Scanner offers rapid network host discovery through parallel IP address probing. The application detects active devices, open TCP ports, and associated hardware addresses within specified address ranges. Administrators receive structured output showing response times, resolved hostnames, and NetBIOS identifiers for Windows machines. The tool executes as a standalone portable file with no installation procedure required.
The scanning workflow supports flexible target definition from single addresses to large subnets. Port checking capabilities cover individual ports, ranges, or service-specific combinations. Output formats include plain text, structured XML, and database-ready SQL exports. Custom opener commands launch external applications with discovered IP addresses as parameters for immediate administrative action.
Network reconnaissance tasks benefit from plugin extensions written in Java. Developers add custom fetchers for specialized data collection or exporters for proprietary output requirements. The multithreaded architecture scales from small office networks to enterprise-scale address spaces. Favorite configurations store recurring scan parameters for repeatable audit procedures.
| CIDR subnet iteration with per-address thread for parallel probing | TCP port state detection identifies open, closed, and filtered services |
| ARP-based MAC retrieval with vendor prefix lookup integration | DNS and NetBIOS reverse resolution for device role recognition |
| NetBIOS data extraction includes workgroup, domain, and logged-in user | TTL hop count and millisecond response time measurement |
| HTTP and HTTPS server verification via response header inspection | Custom opener commands receive IP or hostname as arguments |
| Named favorite profiles for subnets, VLANs, and geographic locations | CSV, TXT, XML, and IP-Port pair export formats |
| Java plugin system extends fetchers, feeders, and exporters | Virtual thread architecture eliminates single-threaded bottlenecks |
| Alive-only filtering hides unassigned addresses in large sweeps | SQL exporter sanitization prevents injection via crafted hostnames |
| Shell argument quoting blocks command injection from DNS responses | Unauthorized web service discovery on intranet segments |
| IP-Port output feeds vulnerability scanners and pentest workflows | Network congestion identification through consistent timing analysis |
| RDP sessions and SSH clients launched directly from scan results | Historical network state records via export file documentation |