@runasand I prefer using ten or so ec2 or digital ocean droplets with a private network and nfs server. Then I use masscan but divide the work using the shard feature. It work pretty well but I’m not doing it long term. Usually trying to find a specific port. Scanning single port at a time I find is the way to go.