fixed scan detector

it detects all scans, tested some browsing too, and that works with no
false positives so far