Future Work Analyze several GB of backscatter and scan data Politically-interesting DDoS targets Widespread scans for WWW, RPC, Microsoft SQL, etc. servers scan: start 2002-04-25 16:04:23 duration 46331 src 61.128.X.X dst X.231.0.1 - X.231.255.254 tcp: flags S sport 32768 - 65535 dport 111 (pkts 161086 bytes 7409956) bs: start 2002-04-25 16:04:35 duration 46322 src 61.128.X.X dst X.231.0.1 - X.231.255.254 tcp: flags R sport 32768 - 65535 dport 111 (pkts 63160 bytes 2905360) bs: start 2002-04-25 09:27:18 duration 480 src 192.244.X.X dst X.240.2.0 - X.70.242.255 tcp: flags SA sport 6660 - 6668 dport 1001 - 2500 (pkts 11919 bytes 548274)