http://www.jackxiang.com/index.php zh-cn http://www.jackxiang.com/post// jack <xdy108@126.com> Wed, 04 Apr 2018 02:04:12 +0000 http://www.jackxiang.com/post// nmap -sT -Pn -p80,443,8080,1883,8883 192.168.0.9 Starting Nmap 6.40 ( http://nmap.org ) at 2025-12-18 17:47 CST Nmap scan report for localhost (192.168.0.9) Host is up (0.073s latency). PORT     STATE  SERVICE 80/tcp   closed http 443/tcp  closed https 1883/tcp closed unknown 8080/tcp closed http-proxy 8883/tcp closed unknown


sudo nmap -sS -p 1-65535  123.115.117.1** PORT    STATE    SERVICE 0/tcp   filtered unknown 22/tcp  open     ssh 80/tcp  filtered http 111/tcp open     rpcbind 443/tcp filtered https sudo nmap 123.115.117.188  -p 1-65535 Password: Starting Nmap 7.92 ( https://nmap.org ) at 2022-04-02 12:52 CST

背景：Windows下的nmap想看看内网到底有哪些IP被DHCP分配，每次VPN断和网络分不开，有的不断有的断开，我估计和IP有关，除开网关 1 255仨外，252台机器找个低点的或高点的末尾IP试试。

https://nmap.org/download.html
https://nmap.org/dist/nmap-7.70-setup.exe
d:\Program Files\Nmap

nmap -p6379 -script redis-info 10.73.23*.1**    #扫redis的6379端口

一）nmap扫描网段内的所有IP
sudo nmap -sP -PI -PT 192.168.1.0/24
Windows下实践如下：
C:\Users\admin>nmap -sP -PI -PT 172.20.175.0/24
Starting Nmap 7.70 ( https://nmap.org ) at 2018-04-04 10:12 ?D1ú±ê×?ê±??
Nmap scan report for bogon (172.20.175.84)
Host is up (0.00s latency).
MAC Address: B0:83:FE:7C:78:21 (Dell)
Nmap scan report for bogon (172.20.175.85)
Host is up (0.00s latency).
MAC Address: 64:00:6A:07:11:0F (Dell)
Nmap scan report for bogon (172.20.175.86)
Host is up.
Nmap done: 256 IP addresses (81 hosts up) scanned in 36.24 seconds
只列出扫描存在的IP和MAc以及Dell品牌电脑，不存在的IP地址未列出。

二）扫描某IP打开了哪些端口：
nmap -p 1-65535 ip

三）扫描指定IP指定端口：
C:\Users\admin>nmap -sT -sV -p80,443,8080 -P0 -n 10.64.6.246
PORT     STATE    SERVICE    VERSION
80/tcp   open     http       Apache httpd 2.2.15 ((CentOS))
443/tcp  filtered https
8080/tcp filtered http-proxy ]]> http://www.jackxiang.com/post//#blogcomment <user@domain.com> Thu, 01 Jan 1970 00:00:00 +0000 http://www.jackxiang.com/post//#blogcomment