I run both IIS and Apache Web servers in my honeynet. The Apache Web server gets attacked significantly more than the IIS server does. Also, most reported hacks are against Apache Web servers.

That works out to be about 6 to 8 percent for IIS and 92 to 94 percent for Apache. The overwhelming slant toward Apache cannot be explained by sheer numbers alone.

That works out to be about 6 to 8 percent for IIS and 92 to 94 percent for Apache. The overwhelming slant toward Apache cannot be explained by sheer numbers alone.