&gt; Why are they not worried about prosecution for their mass port scanning?<p>In his talks the founder says he provides law enforcement with all the crawled data for free and that he has regular contact with the US CERT. So there doesn&#x27;t seem to be any legal problem.<p>My opinion: shodan doesn&#x27;t try to exploit any known backdoors or common user&#x2F;password combinations. Testing for anonymous&#x2F;guest logins is fine in my view.