based on the system names and information hed found in the recycling it didnt appear that they were running any kind of network intrusion detection system so he thought the first thing that he could do would be to run a simple port scan to see what services were listening for connections on the machines that were public facing , which meant available to users on the internet .