Open a DOS window in Win2000, then perform FOR / L% a in (1,1,254) do start / min / low telnet 192.168.0.% A 3389, all open 3389 port hosts After exposing this command, you will open 254 small windows in the taskbar and then the Telnet link failed window will automatically exit after approximately 5 seconds, it is the host that corresponds to the open port. Take a look at the title of the small window. Know the host's IP address If you think that the machine performance can go to the / LOW parameters now to scan multiple ports of a host, as follows for / l% a in (1, 1, 65535) do start / low / min Telnet 192.168.0.1% A This is scanning 192.168.0.1 1 to 65535 port now scan all ports for / L% a in (1, 1, 254) do for / l% b in (1, 1, 65535) Do Start / Low / Min Telnet 192.168.0.% a% B will scan all 1 to 65535 segments of 192.168.0.x paragraphs or above can only be used under Win2000, because / l accumulated parameters are Win2000 to for Extended of course WinXP and Win.Net can be used, WinMe I have not tried because there is no WinME machine
