Re: Internet-wide port scans

2012-10-16 Thread Jimmy Hess
in advance, or if the responsible entity determines that you must abstain from the activity entirely, because the risk level is too high. By definition a reputable service, will not have a policy that you may execute internet-wide port scans of arbitrary ports that include IP networks/addresses that are

Re: Internet-wide port scans

2012-10-16 Thread Valdis . Kletnieks
On Tue, 16 Oct 2012 11:38:52 -0400, Darius Jahandarie said: > In particular, my understanding was that since you're sending a SYN, > it could very well initiate access to stored communications (although What 18 USC 2701 actually says, courtesy of www.law.cornell.edu: "Offense. - Except as provid

Re: Internet-wide port scans

2012-10-16 Thread Darius Jahandarie
On Tue, Oct 16, 2012 at 9:46 AM, wrote: > On Tue, 16 Oct 2012 08:48:47 -0400, Darius Jahandarie said: >> On Tue, Oct 16, 2012 at 12:57 AM, Scott Weeks wrote: >> > Want to re-write that section or should I respond now? ;-) >> >> I always thought it wasn't allowed because of 18 USC 2701, but >>

Re: Internet-wide port scans

2012-10-16 Thread Jay Ashworth
- Original Message - > From: "Scott Weeks" > From: Darius Jahandarie > > Either way, in the US at least, it's not legal to port scan random > machines on the internet, so this was a rather useless exercise. (And > -- > > Want to re-wr

Re: Internet-wide port scans

2012-10-16 Thread Valdis . Kletnieks
On Tue, 16 Oct 2012 08:48:47 -0400, Darius Jahandarie said: > On Tue, Oct 16, 2012 at 12:57 AM, Scott Weeks wrote: > > Want to re-write that section or should I respond now? ;-) > > I always thought it wasn't allowed because of 18 USC 2701, but > IINAL, would be happy to hear otherwise :) If a

Re: Internet-wide port scans

2012-10-16 Thread Darius Jahandarie
On Tue, Oct 16, 2012 at 12:57 AM, Scott Weeks wrote: > Want to re-write that section or should I respond now? ;-) I always thought it wasn't allowed because of 18 USC ยง 2701, but IINAL, would be happy to hear otherwise :). -- Darius Jahandarie

Re: Internet-wide port scans

2012-10-16 Thread Bacon Zombie
Have a look at the talks done by Fyodor the creator of Nmap "Scanning the Internet". http://nmap.org/presentations/BHDC08/bhdc08-slides-fyodor.pdf http://www.securitytube.net/video/170 http://blog.thc.org/index.php?/archives/2-Port-Scanning-the-Internet.html Also if you are look for a host Clou

Re: Internet-wide port scans

2012-10-15 Thread Scott Weeks
--- djahanda...@gmail.com wrote: From: Darius Jahandarie Either way, in the US at least, it's not legal to port scan random machines on the internet, so this was a rather useless exercise. (And -- Want to re-write that section or should I re

Re: Internet-wide port scans

2012-10-15 Thread Darius Jahandarie
On Mon, Oct 15, 2012 at 4:34 PM, Florian Weimer wrote: > A full scan needs just 0.5 TB of data per TCP port, so "roll your own" > is definitely an option. But I expect that any halfway decent hosting > provider will start asking questions after the first billion packets > or so, and at least over

Internet-wide port scans

2012-10-15 Thread Florian Weimer
Are there somewhat reputable service providers for Internet-wide TCP port scans? What's the typical rate per TCP port? (I'm interested in rather obscure services whose identification may need additional probing, and this data is unlikely on file already.) A full scan needs just 0.5 TB of data pe