What is the expected time between port scan for an arbitrary IPv4 address? Is the level of scanning activity so high (or so well-targeted to "promising" address spaces) that one should expect to be scanned in minutes?