0

I am trying to scan all the nearby routers IP Addresses. How can this be achieved? I am new at using Nmap and tried scanning with that. I gave initial target as my Public IP Address range but it didn't help much.

closed as off-topic by Steve, grochmal, HashHazard, schroeder Nov 15 '16 at 22:05

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – grochmal, schroeder
If this question can be reworded to fit the rules in the help center, please edit the question.

  • What do you mean by "nearby"? Are you referring to physical proximity or that they are in the same IP-range? – Zeta Two Nov 15 '16 at 15:31
  • the ones that are within my "WIFI" range actually!! – Chandeep Nov 15 '16 at 15:32
  • This isn't a security question as it is a basic networking question. Put aside using namp for a moment and work out how you will connect to the routers first. – schroeder Nov 15 '16 at 22:04
1

Are you talking about other people's public IP addresses or routers on your home network?

If you're attempting the former you best stop there, if you don't have permission you shouldn't be scanning ANYTHING. You can even get in trouble scanning your own public IP address with some ISPs.

If you're attempting the latter, give NMAP your private address range to scan, not your public address. Your routers most likely sit behind an ISP owned device that hands out private addresses to your local network.

Again, if you're scanning public IP addresses, have permission to do so, or you could get yourself into hot water.


I see now in your comment you have said the ones that are "within your Wi-Fi range". What you are attempting to do could be considered illegal, even if it is a grey-ish area. Just don't. Want to point your NMAP at something to get some practice? Find a bug bounty website (like bugcrowd or something similar), join, and point your scanners at the companies who are actually asking to be scanned. Or, setup a home lab environment. Scanning public addresses isn't a good idea.

Nmap actually hosts scanme.nmap.org for testing purposes just like this one (no DoS, DDoS, or vulnerability exploitation allowed).

If you'd like to do a little reading on the subject, nmap has a page on their website dedicated to the discussion of legality and port scanning. Essentially, port scanning isn't explicitly criminal (at least in the USA), but it is an extremely complicated issue, and you don't want to be one of the outlier cases, so it's best to only scan where you've been given permission.

  • Got that sir! that helped :) – Chandeep Nov 15 '16 at 15:37
  • Just out of curiosity - Why that is illegal ? I mean, just trying to ping some Addresses!! – Chandeep Nov 15 '16 at 15:38
  • 1
    I'm glad! And what you're doing is technically "reconnaissance", although it seems benign, it is what anyone trying to compromise a machine/network would do prior to attempting to exploit a machine/network. – INV3NT3D Nov 15 '16 at 15:38
  • :) Sure.. going through bugcrowd and similar – Chandeep Nov 15 '16 at 15:44

Not the answer you're looking for? Browse other questions tagged or ask your own question.