Fair Use: Please note that use of the Netcraft Blog is subject to our Fair Use and Copyright policies. For more information, please visit http://news.netcraft.com/fair-use-copyright, or email info@netcraft.com.
  1. September 2009 Web Server Survey

    In the September 2009 survey we received responses from 226,099,841 sites, reflecting a modest rise of 149 thousand sites.

    Taking the limelight this month is nginx, which gained 1.2 million sites, beating Apache's growth of 823 thousand. The popular Russian social networking site Vkontakte is the most popular nginx site appearing in Netcraft's million busiest sites. Other popular nginx sites include the comedic Fail Blog and I Can Has Cheezburger? sites, which are both WordPress blogs owned by Pet Holdings, Inc.

    lighttpd suffers a significant loss this month, in stark contrast to its impressive growth last month which took its total up to more than two million sites. lighttpd has lost more than half of its sites since last month leaving its new total at 844 thousand. This drop was mainly due to the loss of 1 million sites on the tubely.com domain, which were hosted on the Amazon AWS service.

    lighttpd promotes itself as a fast web server suitable for Web 2.0 sites like YouTube, Wikipedia and Meebo, with an event-driven architecture optimised for high performance AJAX applications.

    Total Sites Across All Domains August 1995 - September 2009

    Total Sites Across All Domains, August 1995 - September 2009

    Graph of market share for top servers across all domains, August 1995 - September 2009

    Top Developers
    DeveloperAugust 2009PercentSeptember 2009PercentChange
    Apache104,611,55546.30%105,416,92546.62%0.33
    Microsoft49,579,50721.94%49,615,01021.94%0.00
    qq.com30,278,98813.40%30,069,04813.30%-0.10
    Google14,213,9766.29%13,767,3386.09%-0.20
    nginx11,502,1095.09%12,676,2385.61%0.52

    (more...)

    Posted by Netcraft on 23rd September, 2009 in Web Server Survey Share

  2. Most Reliable Hosting Company Sites in August 2009

    Rank Company site OS Outage
    hh:mm:ss
    Failed
    Req%
    DNS Connect First
    byte
    Total
    1 DataPipe unknown  0:00:00  0.034  0.112 0.008 0.016 0.016
    2 Server Intellect Windows Server 2008  0:00:00  0.034  0.078 0.088 0.178 0.369
    3 Swishmail FreeBSD  0:00:00  0.039  0.216 0.056 0.113 0.248
    4 New York Internet FreeBSD  0:00:00  0.039  0.160 0.067 0.141 0.343
    5 INetU unknown  0:00:00  0.039  0.158 0.071 0.150 0.224
    6 www.memset.com Linux  0:00:00  0.039  0.184 0.097 0.207 0.207
    7 www.seeweb.it Linux  0:00:00  0.045  0.366 0.064 0.133 0.143
    8 Virtual Internet Linux  0:00:00  0.050  0.196 0.037 0.129 0.218
    9 iWeb Technologies Linux  0:00:00  0.050  0.224 0.077 0.154 0.154
    10 ReliableServers.com unknown  0:00:00  0.056  0.307 0.057 0.123 0.180

    See full table

    DataPipe and Server Intellect had the most reliable hosting company sites in August 2009.

    This is the 4th appearance in the top ten for DataPipe in the last 5 months. The Jersey City based company offers a number of hosting and managed services to a range of vertical industries including the financial services, healthcare and pharmaceutical sectors.

    Server Intellect has reached the number one position for the first time this year. They run Windows Server 2008 and are Microsoft Gold Partners, recently achieving Microsoft Security Solutions Competency.

    This month sees four company sites using Linux, two using FreeBSD and one using Windows Server 2008.

    (more...)

    Posted by Andy Ide on 1st September, 2009 in Performance Share

  3. HMRC phishing site hosted on gov.uk domain

    An ongoing phishing attack against UK taxpayers is being given additional credibility by using a gov.uk domain. Sefton Council is hosting the phishing content on its Novel GroupWise 7.0 site at web11.sefton.gov.uk.

    The phish follows one of the typical ploys commonly seen in HMRC and IRS phishing attacks: The victim is led to believe that they can receive a tax refund by submitting their full credit card details, but these details are instead sent directly to the fraudster behind the attack.

    gov-uk-phish-resized.png

    The fraudulent form submits the victim's details to a PHP script hosted at www.zamoh.biz.

    gov-uk-phish-action.png

    The UK's Central Office of Information is responsible for deciding who can register gov.uk domains. Eligibility is strictly limited, which helps to preserve the integrity of the gov.uk namespace; however, this obviously has an undesirable effect when this integrity is leveraged by fraudulent content on compromised servers. Netcraft has informed Sefton Council about this phishing attack.

    Netcraft provides an Automated Vulnerability Scanning service which regularly tests your internet infrastructure, supplies the information you need to maintain your security and eliminate vulnerabilities, and audits that it has found no serious vulnerabilities using a dynamically generated seal.

    Posted by Paul Mutton on 1st September, 2009 in Security Share