Today's Internet Threat Level: GREEN
Handler on Duty: Mike Poor
Handler on Duty: Mike Poor
The "Trend" is an attempt to put a number to the increase in activity for a given port. Right now, I am comparing the last 24 hours to the last 30 days. So if we see a rise in activity compared to the last 30 days, the trend is high.
The following formula is used to calculate the trend:
sqrt( (S-s)^2/s + (T-t)^2/t ) )
S: number of source IPs hitting this port last 24 hrs.
s: average number of source IPs hitten this port each day (last 30 days).
T/t: same for target IPs detecting scans on this port.
| Port | Trend |
|---|---|
| 58640 | 4.64 |
| 9978 | 3.01 |
| 51413 | 2.18 |
| 723 | 2.16 |
| 9920 | 2.04 |
| 8443 | 1.99 |
| 9988 | 1.8 |
| 2967 | 1.62 |
| 1800 | 1.5 |
| 25 | 1.5 |
| 1028 | 1.48 |
| 33434 | 1.35 |
| 800 | 1.25 |
| 587 | 1.19 |
| 45306 | 1.15 |
| 18640 | 1.08 |
| 61388 | 0.97 |
| 1690 | 0.96 |
| 1027 | 0.81 |
| 9788 | 0.75 |
| 32000 | 0.63 |
| 1150 | 0.59 |
| 3050 | 0.57 |
| 44641 | 0.43 |
| 67 | 0.36 |
| 21 | 0.22 |
| 13500 | 0.2 |
