Safemode statistics for may 2000

We had 10 mass hacks*, 572 domains where defaced ,254 servers got hit. We got a few servers more then operating
systems the reason for that is that we couldn't determent what os the hacked computer was running.

Operating systems:

Windows NT 4.0:              166      66,4%
Windows NT 3.5:              3        1,3%
FreeBSD:                     27       10.8%
BSDI:                        12       4,8%
Linux:                       24       9,6%
Solaris:                     12       4,9%
Irix:                        2        0,9%
SCO Unix:                    1        0,4%
AIX:                         2        0,9%

Server software:

Microsoft IIS 4.0:           160      62,7%
Microsoft IIS 3.0:           3        2,5%
Microsoft IIS 2.0:           2        0,8%
Apache/1.1.1:                1        0,4%
Apache/1.1.3:                1        0,4%
Apache/1.2.6:                3        1,2%
Apache/1.2.9:                1        0,4%
Apache/1.3.0:                1        0,4%
Apache/1.3.1.1:              1        0,4%
Apache/1.3.3:                19       7,5%
Apache/1.3.4:                3        1,2%
Apache/1.3.6:                34       13,3%
Apache/1.3.9:                12       4,7%
Apache/1.3.11:               3        1,2%
Mini-Proxy/1.0:              1        0,4%
RapidSite/Apa-1.3.4:         1        0,4%
Idea WebServer v0.12:        1        0,4%
Microsoft-PWS-95/2.0:        2        0,8%
Netscape-Fasttrack/2.01:     1        0,4%
Netscape-Fasttrack/3.02:     1        0,4%
Netscape-Enterprise/3.5.1:   1        0,4%
Netscape-Enterprise/3.6 SP3: 3        1,2%

Total Fronpage extensions discovered:

Frontpage/3.0.4:             4
Frontpage/3.0.4.2:           16
Frontpage/3.0.4.3:           1
Frontpage/4.0.4.3:           30

Misc stats:

Ben-SSL/1.36:                 8
Ben-SSL/1.2.9:                5
Ben-SSL/1.15:                 1
BSAFE-SSL/1.1:                5
SSL/1.15:                     1
PHP/3.0.5:                    2
PHP/3.0.7:                    1
PHP/3.0.9:                    2
PHP/3.0.12:                   27
PHP/3.0.15:                   1
PHP/3.0.16:                   1
PHP/4.0.b2:                   1
PHP/4.0.b3:                   1
mod_perl/1.16:                8
mod_perl/1.19:                1
mod_perl/1.21:                18

*masshack: Our definition of a mass hack: more then 10 domains defaced by the same defacer on one day