1. A method, comprising: by a network server, monitoring network traffic received within a target virtual private network comprising a plurality of network addresses including a dark network address assigned to a trap; by the network server, determining that traffic directed to the dark network address is unauthorized network traffic, based on a traffic level of the traffic directed to the dark network address; by the network server, gathering data regarding the unauthorized network traffic including information on the exploitation of vulnerabilities of the target virtual private network; and by the network server, identifying a weakness of the virtual private network based on the information.