Here’s how I used nmap with Tallow on Windows, a transparent Tor proxy:
ICMP is not supported by the Tor network (hence -Pn) neither SYN scanning (hence TCP scanning -sT).
Flag “Force web-only” blocks all ports except 80 and 443, hence why port 22 is filtered.
Didier Stevens 