In surveying some 80 million domain names, Google has found that nearly half (49 percent) of the world's malware is coming from only 23 percent of its servers—those being Microsoft's IIS servers. In Google's security blog on June 5, an Anti-Malware Team member reported that IIS and Apache (also at 49 percent) evenly split up the malware served, even though Apache makes up almost three times the number of Web servers out there. The remaining 2 percent of malware is served up by "other" servers, Google says.
Overall, Google found that 66 percent of all Web servers examined—not just those serving malware—are Apache servers. IIS servers constitute 23 percent of all servers, nginx accounts for 4 percent and "other" accounts for 7 percent. Netcraft's May 2007 Web server survey pegs Apache at only 56 percent of the Web servers out there, and Windows at 31.5 percent, out of 118,023,363 sites surveyed.
View: Full Story
News source: eWeek
Overall, Google found that 66 percent of all Web servers examined—not just those serving malware—are Apache servers. IIS servers constitute 23 percent of all servers, nginx accounts for 4 percent and "other" accounts for 7 percent. Netcraft's May 2007 Web server survey pegs Apache at only 56 percent of the Web servers out there, and Windows at 31.5 percent, out of 118,023,363 sites surveyed.
View: Full Story News source: eWeek
The Bulk of the machines serving malware with IIS are in China & South Korea.
These machines are never been patched because they are running pirated copies!!!
IIS 6 by itself has proven to very secure -- it has never had a remotely exploitable vulnerability in its entire lifetime!
So the exploiters have used other means of compromising the machines or are deliberately serving malware.
Remote exploit #1: http://secunia.com/advisories/11563/
Remote exploit #2: http://secunia.com/advisories/12801/
Remote exploit #3: http://secunia.com/advisories/21006/
Wrongggg
Wrongggggggggg
i can go like this all day.
Ever heard about Netcraft?
Remote exploit #1: http://secunia.com/advisories/11563/
Not a vulnerability, linux can give more information (for example a simple telnet).
Apply a old patch.....
Absurd... since PHP also can be insecure in the same degreed or even more (since in asp and php you can create object, modify system and also run a shell command).
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.