Angry IP Scanner Tutorial

This is the unofficial Angry IP help page.

Product: Angry IP Scanner
Company Homepage: http://www.angryziber.com/
Product Forum: http://www.angryziber.com/forum/forum.php?forum=0

Please use this page as much as possible to learn about or to solve problems with Angry IP Scanner. If you can't find help here you can always post a message in the forum later.

What is Angry IP Scanner?

Angry IP Scanner is a program that allows you to "scan" a network to locate network devices. It is a great program for doing a network audit or for just finding out more information about your network. Angry IP Scanner will located any network device (Computer, Printer, Network Hard Drives, etc..) that responds to the scan. In other words, it will locate any device on the network that has an IP address and that doesn't have some sort of firewall.

Basic Tutorial

Angry IP Scanner is a very powerful network scanner. It is a great tool for doing network audits, locating network devices or computers, and finding out information about your network. If you don't understand any term while reading this help page please see the glossary near the bottom of the page.

Enter an IP range to begin using the program. Click on the double arrow on the right side for more options.



Click on the button under "Hostname:" to choose different columns. Click on the "..." next to "Scan ports" to scan hosts for open ports.



Click "Start" to begin the Scan.

General Troubleshooting and Tips

How to ping a computer: "Start Menu" > Run > type "ping". Then a space and then an IP address. Then click OK.


You should get a reply like below:


If you can't ping a computer than Angry IP Scanner won't find it.

How to use "ipconfig":
Go to "Start Menu" > Run > type "cmd"


At the Command Prompt type "ipconfig /all". This will display useful information.

"IP Address" is your computer's IP address. "Default Gateway" is normally your router or server. "DHCP Server" is normally your router or server. "Physical Address" is your MAC address.


Angry IP Scanner won't tell me what user is logged on:
The messenger service has to be running on the systems you scan to be able to see which user is logged on.

List of Potential Software Firewalls Interfering with IP Scan:
Norton Internet Security
Norton Personal Firewall
Mcafee Personal Firewall
Zone Alarm
Sygate Personal Firewall
Windows XP SP2 Firewall
Windows XP (Pre SP2) Firewall
Routers also contain a firewall
etc...


Can't find computers behind router
Almost all routers today also function as a type of firewall. If you try to scan a network that is connected to a router that you are not connected to the scan will fail to find anything except the router. Routers can be configured to forward ports and allow traffic to pass through, but this is not the default setting. Angry IP Scanner is made to scan your local network only. Using it to scan external network requires advance knowledge of networking.


List of Common Ports:
21 FTP
22 SSH
23 Telnet
25 SMTP
53 DNS (Domain Name Service)
68 DHCP
80 HTTP (HyperText Transfer Protocol)
110 POP3 (Post Office Protocol, version 3)
115 SFTP (Secure File Transfer Protocol)
119 NNTP (Network New Transfer Protocol)
123 NTP (Network Time Protocol)
137 NetBIOS-ns
138 NetBIOS-dgm
139 NetBIOS
143 IMAP (Internet Message Access Protocol)
161 SNMP (Simple Network Management Protocol)
194 IRC (Internet Relay Chat)
220 IMAP3 (Internet Message Access Protocol 3)
389 LDAP (Lightweight Directory Access Protocol)
443 SSL (Secure Socket Layer)
445 SMB (NetBIOS over TCP)
993 SIMAP (Secure Internet Message Access Protocol)
995 SPOP (Secure Post Office Protocol)
4000 ICQ
5010 Yahoo! Messenger
5190 AOL Instant Messenger
5632 PC Anywhere
5800 + 5900 VNC (Remote Admin Software)
8080 HTTP Proxy

For a complete list of ports see here:
http://www.chebucto.ns.ca/~rakerman/port-table.html
http://www.iss.net/security_center/advice/Exploits/Ports/default.htm
http://www.iana.org/assignments/port-numbers
http://lists.gpick.com/portlist/portlist.htm

Glossary

IP Address: An IP address is a number used to identify a network device or computer on a network using the TCP/IP protocol. An IP address consists of 4 numbers each separated by a period. Each number is between 1 and 255.

MAC Address: This is also an address used to identify network devices. MAC addresses are not protocol dependent and are normally built into the hardware.

Subnet Mask: The subnet mask consists of 4 numbers each separated by a period. This number is used to identify which part of an IP address is the network portion and which part is the host portion.

Ping: An action performed on a network device where a small amount of data is sent to the device and the sender times how long it takes for the network device to respond. Response time is normally measured in milliseconds. Firewalls can prevent a device from responding to a ping.

Host: Another way of referring to a computer or network device on a network.

Router: A network device used to share a single public IP address to many private IP addresses.

Port: A port is like a door into a network device. A port number can range from 1 to 65536. An open port normally indicates something waiting for a connection.

Hostname: The name used to refer to a computer or network device.

DNS Server: DNS servers convert Hostname's to IP addresses so that computers can communicate with each other.

Firewall: Any software or hardware mechanism that prevents a network device from responding to unknown network request.