Security Samizdat

The Web Application Security Consortium (WASC) has released an interesting paper with the results of the Distributed Open Proxy Honeypot Project.

The idea of the Distributed Open Proxy Honeypot Project is to place monitored “open proxies” around the world, which are normally used by hackers to mask their origin when performing attacks, scans, etc. According to the authors:

During this timeframe, we had 7 internationally placed honeypot sensors deployed and sending their data back to our central logging host. What did we see? Here are some brief highlights

• SQL Injection Attacks
• Brute Force Attacks
• OS Command Injection
• Web Defacement Attempts
• Google-Abuses (Google-Hacking and Proxying for BannerAd/Click Fraud)
• Information Leakage

You can download the report here.