To perform a true operation, you usually target a subnet. Nmap supports CIDR notation. nmap 192.168.1.0/24
A "network scan" typically refers to scanning a range of IP addresses (e.g., 192.168.1.0/24 ) rather than a single server. This allows you to map every device on a subnet. nmap scan network
Using TCP/IP fingerprinting, Nmap can guess the operating system of the target. To perform a true operation, you usually target a subnet
Known as a "stealth scan" because it never completes the TCP handshake. It is fast and less likely to be logged than a full connection. TCP Connect Scan ( To perform a true operation
This runs a suite of scripts that check for known CVEs (Common Vulnerabilities and Exposures).