>There are plenty of legitimate uses of port scanning, and specifically, a port scanning database like Shodan. // Any legitimate security service is going to b

>There are plenty of legitimate uses of port scanning, and specifically, a port scanning database like Shodan. // Any legitimate security service is going to be doing there own scans, surely. Statistics, yes, but I can't see those stats being especially good. You could probably get equally good nGinx data from netcraft, who IIUC get the data from http responses banners on :80 :443. I'm not sure I buy the "security posture" line, isn't it circular. Tools to help crack your site are good because it means to have to have counter-measures to combat tools for cracking your site? Only legitimate use of port scanning for me has been testing access to my own/clients computers, I feel. That's not too say I've not used it for illegitimate things ...