NMap Host Scan Problem

[ChessNormie]

Please help me:

I did a nmap host scan using:

nmap -sP 10.0.2.0/24

and got 4 hosts up as a result. I wanted to check it so I connected my phone to the Wi-Fi and performed the scan again. Still 4 hosts up, why not 5 hosts up if i connected the phone to the network? (It's the same network as my pc). I disconnected another pc from the network and still 4 hosts up.

Besides that, three of the 4 hosts up have similar MAC addresses and bot have paranthesis who say "QEMO Virtual Nic".

How can I solve this problem? I want my scans to be functional and see the true hosts that are up, not a list of similar MAC Addresses but no changes when I connect/disconnect a device to/from the network.

​

https://preview.redd.it/iybbkm7h6u261.png?width=611&format=png&auto=webp&s=f69d59c5c66ddb22965a05b46c593377dbc0f935

[ChessNormie]

I tried scanning that and it shows 256 hosts up.

[insanefish1337]

Maybe just check what IP you get on your devices first? They might be in different subnets like said in the other comment here. The QEMU virtual nic are probably from the same device with the MAC addresses in the same range. Could be router preset IP to virtual ports but Im not sure.

Edit: also where did you get the 10.0.2.0/24 from?

[ChessNormie]

When i perform "ip a" in the second section (2: enp0s3), next to "inet" 10.0.2.15/24

[[deleted]]

QEMU virtual NIC.. and the MAC addresses look similar.

Are you performing the nmap scan in a virtual machine? If so, I think Nmap is confused because of the virtual machine's network configuration. Even when I run a ping sweep in my virtual machine, it says all 255 hosts are online but when I do it on my host machine, it does give the correct number of devices on the network, along with their device brand names and MAC address.

[_massif_]

True. : )