add another interesting event for SSH and a regex to track detected port scans by scanlogd