the WPAD report

WPAD Statistics

I was able to register several wpad-Domains:

• wpad.bayern
• wpad.casa
• wpad.city
• wpad.club
• wpad.directory
• wpad.dk
• wpad.es
• wpad.expert
• wpad.fr
• wpad.fun
• wpad.gold
• wpad.guru
• wpad.icu
• wpad.life
• wpad.ovh
• wpad.re
• wpad.report
• wpad.school
• wpad.schule
• wpad.store
• wpad.wang
• wpad.watch

Security problems with wpad are well documented and appear if the domain is used for windows systems.

Hits for /wpad.dat

Month	wpad.schule	wpad.li	wpad.school	wpad.casa	wpad.fr	wpad.cz	wpad.re	various	total

 

wpad.ovh was my proof of concept domain in August 2016, it was cheap and available. At this point I did not expect many hits on wpad.ovh but there are a few.
.wang was the 3rd biggest gtld-Domain in September 2016. I was not sure about the expected traffic, because I was not sure how often this is used as local domain for windows systems.
For wpad.schule I expected the highest traffic because two things come together:

• Lots of schools in germany might use this domain, even for internal systems
• semi- and non-professional sysadmins

The various count are the domains without correct HTTP-Host-Header, I see wpad.localdomain or wpad or the ip only th this point.