mkdir -p /etc/masscan/ cp -i data/exclude.conf /etc/masscan/exclude.conf.sample vi /etc/masscan/exclude.conf
…keep the special address blocks and eventually get rid of the irrelevant complains
you end up with
10.0.0.0/8 100.64.0.0/10 127.0.0.0/8 169.254.0.0/16 172.16.0.0/12 192.0.0.0/24 192.0.0.0/29 192.0.0.170/32 192.0.0.171/32 192.0.2.0/24 192.88.99.0/24 192.168.0.0/16 198.18.0.0/15 198.51.100.0/24 203.0.113.0/24 240.0.0.0/4 255.255.255.255/32
eventually avoid carrier-grade NAT
100.64.0.0/10
also “This network” is now routable, eventually remove it from exclusion
#0.0.0.0/8
against the public network
screen -S scan
masscan 0.0.0.0/0 -p25 --excludefile /etc/masscan/exclude.conf \
--rate=500000 -oG massp25.og \
--banners --open-only > massp25.stdout
https://github.com/robertdavidgraham/masscan/blob/master/data/exclude.conf
(gone) https://github.com/br0k3nb1nary/masscan-exclude/blob/master/exclude.conf
https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml
https://tools.ietf.org/html/rfc5735
https://en.wikipedia.org/wiki/List_of_assigned_/8_IPv4_address_blocks