Default ports scanned by nmap
+3
−0
The man page of nmap says:
The simple command
nmap targetscans 1,000 TCP ports on the hosttarget.
Which 1000 ports are those specifically?
1 answer
+2
−0
According to nmap's documentation, it scans the 1000 most commonly open ports.
How does it know, which ports are common? It consults the file nmap-services, located at /usr/share/nmap/nmap-services on Arch Linux that contains the column "port frequency" that determines whether a port has been commonly found open or not.
You can see the scanned ports by adding the debugging option twice to nmap, as in:
nmap -dd localhost
0 comment threads
0 comment threads