Scan only what the client signed for
Read the authorization, then run a service scan against the three hosts it lists. The lab scanner refuses anything outside scope, just as your own process should.
Briefing
The client signed off on three hosts for a quick external check. The list is in ~/auth.txt. A neighbouring address belongs to another company in the same data center.
nmap -sV probes open ports for service versions. Give it exact IPs or use -iL with a file, never a guessed range.
pentest-ws · Scope checks
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.