Ever wonder what it takes to scan the entire internet dozens of times a day and get that data into the hands of the people that need it? Or wonder how The Shadowserver Foundation makes decisions about what to scan for and why?
Along with providing some insights into what the internet looked like when we started scanning in 2013 to what it looks like now, I will describe how the scanning cluster operates and the logic behind what services we choose to scan for.