Source on it being de-facto illegal?
I've not seen anything that says simply scanning for open ports is illegal, doing vulnerability scans may be though.
I've not seen anything that says simply scanning for open ports is illegal, doing vulnerability scans may be though.