Today's Internet Threat Level: GREEN
Handler on Duty: Chris Carboni
Handler on Duty: Chris Carboni
The "Trend" is an attempt to put a number to the increase in activity for a given port. Right now, I am comparing the last 24 hours to the last 30 days. So if we see a rise in activity compared to the last 30 days, the trend is high.
The following formula is used to calculate the trend:
sqrt( (S-s)^2/s + (T-t)^2/t ) )
S: number of source IPs hitting this port last 24 hrs.
s: average number of source IPs hitten this port each day (last 30 days).
T/t: same for target IPs detecting scans on this port.
| Port | Trend |
|---|---|
| 623 | 12.29 |
| 5884 | 11.07 |
| 2954 | 6.51 |
| 3050 | 5.78 |
| 2700 | 5.73 |
| 112 | 4.85 |
| 22105 | 4.2 |
| 62000 | 3.93 |
| 32001 | 3.84 |
| 6666 | 3.28 |
| 5910 | 3.15 |
| 65355 | 3.13 |
| 20001 | 3.09 |
| 65412 | 2.86 |
| 8383 | 2.77 |
| 51413 | 2.69 |
| 10001 | 2.49 |
| 1669 | 2.35 |
| 45306 | 2.19 |
| 19991 | 1.97 |
| 9920 | 1.94 |
| 8118 | 1.83 |
| 2967 | 1.64 |
| 1978 | 1.62 |
| 12560 | 1.52 |
| 9788 | 1.51 |
| 40313 | 1.47 |
| 9988 | 1.46 |
| 11792 | 1.42 |
| 12048 | 1.42 |
| 18594 | 1.41 |
| 11008 | 1.37 |
| 11536 | 1.36 |
| 11776 | 1.36 |
| 6000 | 1.35 |
| 12544 | 1.34 |
| 13056 | 1.31 |
| 9472 | 1.3 |
| 53 | 1.27 |
| 12288 | 1.24 |
| 10512 | 1.2 |
| 12816 | 1.19 |
| 11024 | 1.18 |
| 9488 | 1.1 |
| 33434 | 1.1 |
| 12032 | 1.06 |
| 10752 | 1.06 |
| 12800 | 1.05 |
| 8555 | 1.05 |
| 11280 | 1.05 |
| 13072 | 0.98 |
| 12304 | 0.97 |
| 1982 | 0.93 |
| 9984 | 0.91 |
| 10496 | 0.86 |
| 44641 | 0.83 |
| 18640 | 0.78 |
| 11520 | 0.75 |
| 10768 | 0.74 |
| 1813 | 0.73 |
| 11264 | 0.72 |
| 9728 | 0.72 |
| 9232 | 0.66 |
| 3124 | 0.59 |
| 2556 | 0.52 |
| 5060 | 0.39 |
| 10256 | 0.25 |
| 1948 | 0.22 |
| 23 | 0.17 |
| 24976 | 0.17 |
