on the other hand, the web exploitation kit mpack showed us that our identification of malicious web servers with high interaction client honeypot, such as capture-hpc, has some limitations.
The IP tracking functionality throws a wrench in the works of client honeypots and is likely to result in many false negatives if not addressed appropriately.