- virtual machines - Where does Xenserver store local VMs - Server Fault
- search for esx servers - Google Search
- Downloads
- nmap find vmware - Google Search
- network - How to detect hosts running in virtual machines with nmap? - Information Security Stack Exchange
- http-vhosts NSE Script
- hostmap - the automatic hostnames and virtual hosts discovery tool
-
[How to discover the ESXi node in given IP range? VMware Communities](https://communities.vmware.com/thread/485284?start=0&tstart=0)