**Scenario:**

I have a router with a public IP address provided by the ISP and two hosts behind the router with a private IP (192.168.x.x).

Is it possible to perform a port or vulnerability scan of a private subnet behind public IP address?