EXP IP Scanner releases
What changed, why it matters, and which version introduced it. The current version is v1.4.4.
TCP 53 is no longer part of the default service sweep, preventing gateways that transparently proxy DNS from making unrelated devices appear to run DNS. Port 53 remains available for explicit custom scans.
After the passive Security pass identifies PHP, the main results table now shows PHP or the disclosed PHP version beside normal HTTP, HTTPS, SMB, RDP, and other service chips. The runtime stays visible without inventing a fake port.
After field testing, the Security pass drops Synology DSM vulnerability verdicts and package-specific cards that could add noise. Synology services are still identified normally, while vulnerability findings stay focused on the PHP2Shell checks that can be classified more reliably from passive web evidence.
The passive Security pass now recognizes confirmed Synology DSM systems, checks disclosed DSM builds against critical fixed releases, and adds Synology-specific PHP2Shell package guidance without sending exploit payloads.
Run a passive security pass across discovered web devices or check a website directly. EXP IP Scanner identifies PHP exposure, classifies PHP2Shell patch status, and highlights critical or review devices without sending exploit payloads.
Watch Mode repeats scans on a 5, 10, or 30 second interval and highlights devices that appeared, changed, or went offline without creating persistent monitoring history.
The experimental Backstage companion has been retired. Releases now focus on a clean Portable ZIP and the standard Installer.
1.2.1 introduced an experimental console companion. It was retired in 1.2.2 after real-world compatibility proved inconsistent.
The network strip can now copy adapter, local IP, gateway, scan range with address count, and public IP as one ticket-ready block.
The built-in Ping now runs four probes with loss and latency statistics, and every website deployment captures fresh screenshots from the current app UI.
The results area now points out that a device can be double-clicked for full details or right-clicked for quick actions, with row-level tooltips as a second cue.
The installed edition now checks quietly after startup and shows an Update badge in the top bar when a newer signed release is ready. Open it and install directly from About.
The installed edition now carries EXP's updater signing key. Signed future releases can be verified, installed, and relaunched directly from About with Install and restart.
A new Copy IPs action copies the selected devices, or every device currently shown, as a clean one-address-per-line list ready for scripts, firewall rules, tickets, and other network tools.
Update checks, downloads, release links and the future signed updater feed now use the EXP-owned GitHub repository, so installed copies no longer depend on a personal account.
“Check now” reads the latest stable GitHub release first. If a signed in-app updater manifest is available it can install in place; otherwise it offers the normal download instead of showing an error.
A one-line summary of the adapter, this machine’s address, the default gateway, the scan range and your public IP address — plus the EXP logo, accent colour and icons throughout the application.
Fast subnet discovery, live device results, vendor and service identification, consultant actions, CSV export, and separate portable and installed editions.