Nmap¶

How to Scan Networks with Nmap¶

Run nmap¶

sudo nmap -sn 192.168.1.0/24

ambagasdowa@Kalacmul:~$ nmap -sn 192.168.1.0/24
Starting Nmap 7.80 ( https://nmap.org ) at 2023-08-06 09:51 CST
Nmap scan report for 192.168.1.62
Host is up (0.078s latency).
Nmap scan report for 192.168.1.85
Host is up (0.021s latency).
Nmap scan report for 192.168.1.87
Host is up (0.0025s latency).
Nmap scan report for 192.168.1.99
Host is up (0.00088s latency).
Nmap scan report for 192.168.1.113
Host is up (0.19s latency).
Nmap scan report for 192.168.1.114
Host is up (0.049s latency).
Nmap scan report for 192.168.1.128
Host is up (0.11s latency).
Nmap scan report for 192.168.1.129
Host is up (0.37s latency).
Nmap scan report for 192.168.1.168
Host is up (0.10s latency).
Nmap scan report for 192.168.1.178
Host is up (0.25s latency).
Nmap scan report for Kalacmul.uruk (192.168.1.224)
Host is up (0.000079s latency).
Nmap scan report for 192.168.1.248
Host is up (0.13s latency).
Nmap scan report for 192.168.1.254
Host is up (0.0011s latency).
Nmap done: 256 IP addresses (13 hosts up) scanned in 14.50 seconds

Scan Ports¶

nmap -A 10.8.0.35

Output¶

Starting Nmap 7.80 ( https://nmap.org ) at 2023-08-06 11:21 CST
Nmap scan report for 10.8.0.35
Host is up (0.36s latency).
Not shown: 991 closed ports
PORT     STATE SERVICE         VERSION
22/tcp   open  ssh             OpenSSH for_Windows_8.9 (protocol 2.0)
135/tcp  open  msrpc           Microsoft Windows RPC
139/tcp  open  netbios-ssn     Microsoft Windows netbios-ssn
445/tcp  open  microsoft-ds?
3389/tcp open  ms-wbt-server   Microsoft Terminal Services
| rdp-ntlm-info:
|   Target_Name: LOGISTICA4-TEI
|   NetBIOS_Domain_Name: LOGISTICA4-TEI
|   NetBIOS_Computer_Name: LOGISTICA4-TEI
|   DNS_Domain_Name: LOGISTICA4-TEI
|   DNS_Computer_Name: LOGISTICA4-TEI
|   Product_Version: 10.0.19041
|_  System_Time: 2023-08-06T17:23:35+00:00
| ssl-cert: Subject: commonName=LOGISTICA4-TEI
| Not valid before: 2023-05-09T04:49:21
|_Not valid after:  2023-11-08T04:49:21
|_ssl-date: 2023-08-06T17:23:50+00:00; 0s from scanner time.
5800/tcp open  vnc-http        TightVNC (user: logistica4-tei; VNC TCP port: 5900)
|_http-title: TightVNC desktop [logistica4-tei]
5900/tcp open  vnc             VNC (protocol 3.8)
|_ssl-cert: ERROR: Script execution failed (use -d to debug)
|_ssl-date: ERROR: Script execution failed (use -d to debug)
|_sslv2: ERROR: Script execution failed (use -d to debug)
|_tls-alpn: ERROR: Script execution failed (use -d to debug)
|_tls-nextprotoneg: ERROR: Script execution failed (use -d to debug)
|_vnc-info: ERROR: Script execution failed (use -d to debug)
7070/tcp open  ssl/realserver?
|_ssl-date: TLS randomness does not represent time
9876/tcp open  sd?
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:
|_nbstat: NetBIOS name: LOGISTICA4-TEI, NetBIOS user: <unknown>, NetBIOS MAC: 00:ff:b0:ac:d6:33 (unknown)
| smb2-security-mode:
|   2.02:
|_    Message signing enabled but not required
| smb2-time:
|   date: 2023-08-06T17:23:34
|_  start_date: N/A

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 228.06 seconds

Last update: Nov 20, 2024