Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I used nmap to scan all the ports in the hosts in a network by using the command:

$ nmap 172.31.100.0/24

What I found is that it showed the following in the result:

Nmap scan report for 172.31.100.0
Host is up (0.0039s latency).
Not shown: 998 closed ports
PORT STATE SERVICE
23/tcp open telnet
80/tcp filtered http

What does 172.31.100.0 represent? Is it a specific interface or something else?

share|improve this question
    
What version of nmap did you use, and what exact command line? Is this the whole report? I don't recognize “scan report” in nmap output. Usually, an address ending in .0 in a /24 network is the network address and cannot be used for a machine, but it's technically possible to have a machine with this address. –  Gilles Nov 12 '11 at 1:28
add comment

1 Answer 1

up vote 2 down vote accepted

172.31.100.0 is the IP address of one of the hosts you scanned. If your network is actually 172.31.96.0/21 (or larger), then 100.0 is a perfectly valid IP address.

172.31.100.0 is part of the pre-CIDR Class B IP space, so you may have gotten a default network of 173.31.0.0/16 if you didn't configure otherwise (and 100.0 completely valid on that network).

If you don't want to scan .0, you can invoke nmap with a range: nmap -sS 172.31.100.1-254.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.