nmapp is an on-device TCP connect scanner for Android. Find live IPv4 hosts on a LAN and see which TCP ports are open — the same idea as nmap -sT and nmap -sn, from your phone.

Use it on networks you own or have permission to test: home Wi-Fi, a lab, a VPN, or a device you administer.

WHAT YOU CAN DO
• See this phone's IPv4 networks (Wi-Fi, Ethernet, VPN, cellular)
• Discover live hosts in a CIDR or last-octet range
• Scan a host, IP, or hostname for open TCP ports
• One tap: find IPs on the current LAN, or scan this device's ports
• Tap a discovered host to scan its ports

PORT SCANNING
Each probe is a real TCP connect. Results are reported as open, closed, or filtered. Open ports show connect latency and a common service name when known (ssh, http, https, rdp, mysql, and others).

Port presets:
• Common — SSH, web, mail, SMB, RDP, databases, and similar
• Web — HTTP/HTTPS plus typical local-dev ports
• Custom — a list or range, e.g. 22,80,443 or 8000-8010 (up to 256 ports per scan)

HOST DISCOVERY
Enter a CIDR such as 10.197.95.0/24 or a last-octet range such as 10.197.95.1-254. Live addresses appear as they answer a TCP ping (ports 80, 443, 22). Reverse hostnames are shown when available.

Private RFC1918 ranges can be swept up to a full /8. Public ranges are capped so this is not an internet-wide scanner. Large sweeps can take a while; online hosts still show up as they are found, and you can stop anytime.

HOW IT WORKS
Probes run locally over native TCP sockets. Nothing is sent to a cloud scanner. The INTERNET permission is used to open the TCP connections you request, including listing this device's addresses.

WHAT THIS APP IS NOT
nmapp is not nmap. It does not do SYN, UDP, or "stealth" scans, OS fingerprinting, version detection, or NSE scripts. A host that ignores the discovery ports may look down even if it is online.

RESPONSIBLE USE
Only scan hosts and ranges you own or have explicit permission to test. Scanning other people's networks without authorization can be illegal. The app asks you to confirm permission before every scan. No account required. Scans run on your device.

The listing stays honest about TCP-connect-only scanning and authorized use, which Play’s device and network-abuse review tends to look for. In Console, pair it with a Data safety form that matches this: no account, no cloud scanner, INTERNET only for the connections the user starts.