• We should now be fully online following an overnight outage. Apologies for any inconvenience, we do not expect there to be any further issues.

ethics of scanning

groovin

Senior member
Jul 24, 2001
857
0
0
i know there is alot of scanning going on out ther so i was wondering is it illegal to port scan a outside network? what seperates curiosity from cracking? for example, i scan my network all the time looking for open ports and i read some security paper saying that doing some footprinting and enumeration is a good way to find more info on a potential ISP or other service provider you might be considering (even tho their sales people would probaly tell you what they are running)

 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
its generally considered rude. On some networks it is forbidden under the acceptible use policy.

Look at it this way - would you want me to use a war dialer on every phone number you had?
 

Oaf357

Senior member
Sep 2, 2001
956
0
0
Typically, if I see I've been scanned (or someone attempted a scan) I scan the source IP address of that scan. If the scanning continues then I know it's some random idiot that's looking at me and not looking at himself. When the IP address suddenly goes dead in the middle of a scan (I ping while I scan) then I know an intelligent (or at least intelligent enough to make sure he's seeing what people are doing to him) being is on the other end.

I usually don't scan unless I'm trying to get someone's attention. I don't scan unless provoked. It's not exactly ethical but I think the way I use it, it's not exactly unethical either.
 

Mucman

Diamond Member
Oct 10, 1999
7,246
1
0
Good question...

To me, it's like a guy who walks by your care and lifts the passenger door handle to see if it's unlocked... The car alarm is your IDS,while locks are your firewall.... or something like that :p

Only only scan hosts that I see have tried ssh'ing into my home machine more than a couple times (I will let two attempts go since it's probably a typo...)albeit I am running sshd on port 443, so
I am not sure why they are sshing on the port in the first place :Q
 

Santa

Golden Member
Oct 11, 1999
1,168
0
0
Is this really a hard to understand question or answer?
Obviously there right and wrong.

Why you are scanning determines the answer whether it is right or wrong.

Are you doing it to secure your network?

Are you allowed to do it on the host/network you are attempting it on?

This is a no brainer.