search

robertdavidgraham / masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
GNU Affero General Public License v3.0
23.78k stars 3.08k forks source link

Don't you get blocked by ISPs? #502

Open kjiregt845gj opened 4 years ago

kjiregt845gj commented 4 years ago

Hey guys,

A quick question, as the title describes; don't you get blocked by ISPs when scanning a range which has a lot of IP addresses in it? As far as I know a lot of ISPs (and other types network providers or just owners of IP ranges) have network security appliances such as firewalls, IPS, anti-DDoS appliance, etc. now if you, as the scanner, reach a certain rate-limit (1,000 requests per second, 1,000,000 per hour or whatever) they will block you completely for some amount of time. And you won't get any indication that it happened, which would mess up the results.

The only things I can think of are scanning more slowly, changing IPs using a VPN or just setting up more machines so each would create less requests.

How do you deal with that?

mr-459 commented 4 years ago

use warez servers mostly vietnam servers have no problem with portscan

scanpatch commented 4 years ago

And what to do if i need to use a legal way to scan ports as a private company?

Enrico204 commented 4 years ago

@R-Romanov you need to check your local legislation system. I strongly suggest your to ask to a lawyer

DenTricky73 commented 2 years ago

A VPN is useless since unfortunately masscan use your real adapter and not the tunnel.