1. A computing system comprising: at least one hardware processor; and at least one application executable on the at least one hardware processor to: monitor, during a first time period, events associated with a network address to obtain event information; determine a first reputation score of the network address based on the event information, wherein the first reputation score is associated with the first time period; and determine a second reputation score of the network address based on the first reputation score, trend information associated with the first reputation score, and a portion of the event information corresponding to a second time period, wherein the second reputation score is associated with the second time period, and wherein the second time period is a portion of the first time period, wherein the trend information includes a slope associated with multiple historical points, wherein the multiple historical points are associated with the first reputation score.