Nmap range of ports lower than the top X ports (top 100-150, etc.):
(@bonsaiviking tweet):
# Scan the N most popular ports
# *after* the M most popular ports.
#
nmap --top-ports N --exclude-ports \
$(nmap -v -oG - --top-ports M \
| awk -F'[;)]' '/Ports/{print $2}')
OWASP Amass - network mapping of attack surfaces and external asset discovery