Secure your Network Advertise on Netcraft About Netcraft Join Netcraft Site Map

What's that site running? Web Server Survey SSL Server Survey Explore web sites News

Netcraft Web Server Survey	Reports  Graphs  Mechanics  Developers  Servers  Most Requested Sites  Archive

Jobs available at Netcraft

The Netcraft Web Server Survey is a survey of Web Server software usage on Internet connected computers. We collect and collate as many hostnames providing an http service as we can find, and systematically poll each one with an HTTP request for the server name.
In the August 2001 survey we received responses from 30,775,624 sites.

iPlanet is the sum of sites running iPlanet-Enterprise, Netscape-Enterprise, Netscape-FastTrack, Netscape-Commerce, Netscape-Communications, Netsite-Commerce & Netsite-Communications.

Microsoft is the sum of sites running Microsoft-Internet-Information-Server, Microsoft-IIS, Microsoft-IIS-W, Microsoft-PWS-95, & Microsoft-PWS.

Platform groupings are here.

Around the Net

Absolute number of sites found falls

Code Red - the catalyst for internet security

The combination of the Code Red worm and the first cumulative patch for Microsoft-IIS has significantly improved the security of Microsoft-IIS systems on the internet. Figures are shown below are for the vulnerability of Microsoft-IIS sites tested for the first time by our security services over the last year. This is typically in the range of a few hundred systems in each month.

% of Vulnerable Microsoft-IIS SSL Sites

The table demonstrates in part the deep set complacency regarding security amongst ecommerce sites, and in part the difficulties in maintaining a reasonable level of security without the benefit of regular external testing. The high visibility of Code Red induced many ecommerce sites running Microsoft-IIS to patch their systems for the first time, and the availability of a cumulative patch has eliminated a lot of earlier vulnerabilities from many sites.

Note that the patch does not necessarily remove the root.exe facility installed by both sadmind/IIS and Code Red II. root.exe allows anyone on the internet to have commands on the machine executed with web server privileges, and can typically be used to set up logging of credit card information and other sensitive data on SSL servers. This has created a new class of ecommerce site which has been correctly patched for known server vulnerabilities, but have a live backdoor facility enabling attackers to continue to remain in control of the machine. Currently around 12% of SSL sites running Microsoft-IIS tested for the first time are in this state.

Self-interest dictates we mention that Netcraft's business includes automated penetration testing, site audits, and site monitoring.

Itanium systems available shortly, and likely to extend the momentum of Intel Architecture in Ecommerce

Ashok Kumar of Piper Jaffray writing in an article published on news.com argues that "Sun will be a big loser [with] ... a significant loss of share within two to three years to Itanium supporters such as HP, IBM and Compaq." Broadly speaking, unless Sun produces something exceptional, the advent of the Itanium is likely to amplify the trends of the last two years, with Solaris slowly but steadily losing share to Intel Architecture systems running both Linux and Microsoft operating systems. The real skill is in picking the winners amongst the different Intel aligned hardware and software vendors.

Dogfood

Reports and Interactive Queries

Fair Use, Copyright

Netcraft Web Server Survey	Reports  Graphs  Mechanics  Developers  Servers  Most Requested Sites  Archive