I have a firewall that forwards port 2222 to a Linux machine running SSH server on port 2222. The problem is I do not know what the IP of the firewall is. So I want to scan the subnet to tell me which IP has this forwarded port.
I tried this script:
#!/bin/bash for ((i=2; i<256; i++)); do sudo nmap -sS -p2222 10.1.$i.0/24 done
The output of this is a lot of this:
Host is up (0.00039s latency). PORT STATE SERVICE 2222/tcp open EtherNetIP-1
For 256x256 hosts this is what I see. I think this answer could be one of two answers:
- What should the output be? Maybe I missed it and must
- What is a different
nmapscan I should use?