|
|
|
|
|
|
by RIMR
872 days ago
|
|
|
My thoughts exactly after seeing how many Confluence servers were reporting as F5 devices. That's exactly what BIG-IP does... I wouldn't conclude that to be a honeypot. If anything, BIG-IP and Confluence are frequently used by the same kinds of companies, so I would expect the majority of that first query to be real Confluence servers. Queries 2-4 probably did a better job filtering out real honeypots. In reality, there might be about as many honeypots as there are real Confluence servers, which is still far too many, but not quite as extreme a disparity as suggested by the numbers in this article. |
|
|