# Scope and legal

Source: https://otinstaller.com/guides/osintverse-community/ip-investigation/01-scope-and-legal (page 2 of 5 of osintverse-community/ip-investigation)

- **Passive only.** Every tool in this playbook reads data that registries, CDNs and internet-wide scanners already
  publish. Scanning an address yourself (port scans, vulnerability checks) needs the owner's written permission.
- **An IP is not a person.** Home connections change address, many users share one address behind carrier NAT, and
  VPNs, Tor and cloud hosts sit in front of almost everything. Use an IP to find the operator of a network, not to name
  an individual.
- **Abuse contacts are for abuse.** RDAP gives you the network's abuse address. Use it to report real abuse, not to
  ask for subscriber details; those only come through legal process.

Next: https://otinstaller.com/guides/osintverse-community/ip-investigation/02-ownership.md