Attempted to compromise, or just port scanned?