From a counterintelligence perspective, standard honeypothoneynet technologies have not bared much fruit in the way of web attack data. Webbased honeypots have not been as successful as OS level or other honeypot applications such as SMTP due to the lack of their perceived value. Deploying an attractive honeypot web site is a complicated, timeconsuming task. Other than a Script Kiddie probing for an easy defacement or an indiscriminant worm, you just wont get much traffic.

Website: http://www.webappsec.org/projects/honeypots/