Configurable IP scan ranges

[ctrlsam]

The port scanner will scan on all IPs which could get us in some trouble. The ranges should be configurable and in addition, a list of known government cloud ranges should be added to a blacklist and ignored by default.

Task

1. Allow custom IP ranges to be supplied to the port scanner (ZMap).
2. Provide default ranges that exclude blacklisted hosts.

[ctrlsam]

May want to use zmap's blocklist functionality with an override option:

Usage: zmap [OPTION]... [SUBNETS]...
A fast Internet-wide scanner.

Basic Arguments:
  -p, --target-ports=ports      comma-delimited list of ports and port ranges
                                  to scan (for TCP and UDP scans)
  -o, --output-file=name        Output file
  -b, --blocklist-file=path     File of subnets to exclude, in CIDR notation,
                                  e.g. 192.168.0.0/16
  -w, --allowlist-file=path     File of subnets to constrain scan to, in CIDR
                                  notation, e.g. 192.168.0.0/16
  -I, --list-of-ips-file=path   List of individual addresses to scan in random
                                  order. Use --allowlist-file unless >1 million

[ctrlsam]

Completed in #5