The HackerWatch system coordinates data from hundreds of thousands of separate firewall nodes This network of nodes can be used to detect patterns that indicate computers that are searching for systems to infect