analyzed traffic captured at honeynets in order to study the statistical properties of 22 large-scale scanning events. In a followup study, Li et al. [20] extracted botnet scan traffic from honeynet data and used it to infer general properties of botnets, such as popula- tion characteristics,...