https://labs.ripe.net/author/johannes_krupp/honeypot-based-monitoring-of-amplification-ddos-attacks/