tweaks to port scan detection as it wasn't really working very well