This isn’t Whonix specific per se - you’ll see this if you try to scan
through Tor. Changing your netvm to sys-firewall will show the results
you expect.
If you want to scan over Tor, install proxychains, and change the last
line of /etc/proxychains.conf to:
socks4 IP_OF_NETVM 9050
2 Likes