Nmap scan subnet for live hosts