While passive reconnaissance is focused on gathering publicly available information, scanning and enumeration involves probing the target system (i.e. Port Scanning). What is ethical behavior and what is not in regards to gathering information on a target without written consent? Is this clearly defined or are there some gray areas? Are there any consequences for unethical behavior?