[Dshield] Port 135

Johannes Ullrich jullrich at euclidian.com
Fri Oct 18 17:34:47 GMT 2002


On Thu, 17 Oct 2002 18:14:13 -0700
John Draper <crunch at shopip.com> wrote:

> >If a SC system was so attacked, it could potentially be called it a port
> >scan (which is illegal) 
> 
> Port scans are illegal?    Since when?   What laws?   State?   or Fed?
> if state,  which state?   And what does "SC" mean?

very much 'depends'. There have been (very few) successful prosecutions
of effective portscans. Even though the unsuccessful attempts have made
the press. Also, portscans can be used as an indication of illegal 
activity and can be used to trigger an investigation. While federal law
may not apply, state law can apply in some of these cases, in particular
if you have someone scan users of the same ISP they are connected to.

However, most law enforcement authorities are kept busy with more
severe issues.


-- 
--------------------------------------------------------------------
jullrich at euclidian.com             Collaborative Intrusion Detection
                                         join http://www.dshield.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://www.dshield.org/pipermail/list/attachments/20021018/be60914d/attachment.bin


More information about the list mailing list