122.1.0 (portscan) TCP Portscan 
HostExists(+DST_ADDR+)
HasService(+DST_ADDR+, +ANY_PORT+)