1. A method, comprising: reserving a plurality of network addresses within a public network; creating a virtual private network using the plurality of network addresses; assigning a network address to a trap, the network address being a dark address of the virtual private network; monitoring network traffic destined for the network address; and gathering data regarding the network traffic.