Trends

The "Trend" is an attempt to put a number to the increase in activity for a given port. Right now, I am comparing the last 24 hours to the last 30 days. So if we see a rise in activity compared to the last 30 days, the trend is high.

The following formula is used to calculate the trend:
sqrt( (S-s)^2/s + (T-t)^2/t ) )
S: number of source IPs hitting this port last 24 hrs.
s: average number of source IPs hitting this port each day (last 30 days).
T/t: same for target IPs detecting scans on this port.

PortTrendService
61105.81
52002.83
4652.41
24252.29
13442.1
5452.07
31052.01
13151.98
25931.93
1301.91
30731.85
25611.81
20811.68
13081.59
88801.52
20731.51
270051.46
12861.41
13361.41
12131.4
12841.38
13271.38
84441.38
12941.38
12931.37
13231.37
13091.36
11841.36
13311.35
15691.35
13341.35
13021.35
12101.35
12421.34
13191.34
13291.34
12531.34
13221.33
13421.33
12921.33
12171.33
12901.33
13161.33
12271.33
12161.33
13011.33
13061.32
12951.32
12391.32
12231.32
12281.32
13391.32
12381.32
12371.32
13171.32
12291.31
12051.31
11621.31
13401.31
12311.31
12891.31
12261.31
12251.31
11611.31
12711.31
12401.3
13261.3
12701.3
11671.3
12881.3
13411.3
12471.3
13211.3
13241.29
13031.29
13301.29
12331.29
12961.29
13321.29
13041.29
12181.29
12241.29
12361.29
12461.28
11741.28
12831.28
12981.28
13281.28
11231.28
13431.28
13101.28
12441.28
10571.27
12151.27
12911.27
12661.27
12451.27
12191.27
13201.26
12671.26