I run both IIS and Apache Web servers in my honeynet. The Apache Web server gets attacked significantly more than the IIS server does. Also, most reported hacks are against Apache Web servers.

Over the last month, I’ve decided to track every reported Web site exploitation or malicious Web server host. With more than 3,000 data points, the number of reported malicious or compromised ...