If Stuck, Scan Again From a Pivot
reconchecklist
Summary
An internal vantage point may expose ports that were filtered from the outside.
Walkthrough
When you stall, re-run nmap from a different vantage point such as a pivot host — new ports often appear from inside.