VessOnSecurity on Nostr: What resources are the attackers accessing? Not only for this exploit but for Citrix ...

What resources are the attackers accessing? Not only for this exploit but for Citrix Netscaller exploits in general. I'm running a honeypot for it but it was seen only 3 hits for the past 5 years. It is geared towards a specific exploit, though - it looks only for attackers trying to access /vpn. So, I was wondering if I could expand it to catch the newer exploits, too.