Implement Port Scan Alert

[manuelceroni]

Implement a port scan alert using the flows stored on Clickhouse. Create a query to extract the data and create an alert similar to 3175210. Note that some protocols may be allowed to use many ports such as FTP_DATA which uses dynamic ports which may generate false positives.