Maybe the freedombox interface could also show that. Explaining that IPs are scanned more often, or whatever the reason is.