🚫 masscan-exclude: Exclude Unwanted IP Ranges from Masscan Scans

📘 Overview

The exclude.sh script is designed to help you exclude specific IP ranges from your Masscan scans.

The exclude.conf file is designed to help you exclude specific IP ranges from your Masscan scans.

masscan 0.0.0.0/0 -p0-65535 --excludefile exclude.conf

Excluded ranges:

• 🔒 Private IPs
• 🌐 Reserved IPs
• 🕸️ Bogon IPs
• 🌍 Root DNS servers
• 🏛️ Government and law enforcement IPs

By filtering out these ranges, you can focus your scans on more relevant targets and avoid unnecessary traffic to sensitive or internal networks.

⚙️ Prerequisites

Before running the script exclude.sh, ensure you have the following installed:

• ✅ ipset – for managing IP sets
• ✅ iptables – for configuring firewall rules
• ✅ curl – for fetching the exclusion list

🛠️ Installation & Usage

1. Clone the Repository:

   git clone https://github.com/scriptzteam/masscan-exclude.git
   cd masscan-exclude
   

2. Run the Script:

   ./exclude.sh

This will:

Download the latest exclude.conf file.
Flush and recreate the masscan-exclude IP set.
Populate the set with IPs to exclude.
Update iptables rules to drop incoming and outgoing traffic to/from these IPs.