Preventing Web Attacks with Apache

10. Open Web Proxy Honeypot

The goal of this chapter is to build upon the honeypot concepts outlined in Chapter 9, “Prevention and Countermeasures,” in order to provide the reader with real, in-the-wild attack data gathered from an Apache open proxy honeypot. The data presented in this chapter was gathered as part of the Honeynet Project’s Scan of the Month Challenge that I sponsored back in April of 2004 (www.honeynet.org/scans/scan31). This honeypot deployment and resulting data is relevant to our discussion of Apache security as it combines the previously discussed security settings and allows for unique log file analysis. The reader is encouraged to download the Apache web server log files from the Honeynet Project Scan of the Month challenge ...