OS/Linux Distributions using Apache
September 1st, 2018
Report DescriptionThe Apache server has in virtually any unbiased metric available (either from us or elsewhere) a majority market share in the web server market. Couple this with the fact that Apache will often provide hints as to the nature of the host OS it is running on, and one can view trends of linux distributions, how specialty OS' are performing in the server market and so on.
MethodologyThe principal is simple: when issuing a request for a page to an Apache web server, the response received consists of HTTP
Response Headersas well as the body of the web page being requested. For example, consider if we connect to a host on port 80 and request the root document. Our transaction might look something like this:
$ telnet 192.168.1.1 80 Trying 192.168.1.1... Connected to 192.168.1.1. Escape character is '^]'. GET / HTTP/1.0 HTTP/1.1 200 OK Date: Thu, 14 Feb 2008 16:24:24 GMT Server: Apache/2.2.3 (Debian) DAV/2 PHP/4.4.4-8+etch4 mod_perl/2.0.2 Perl/v5.8.8 Last-Modified: Wed, 10 Oct 2007 14:01:07 GMT ETag: "62c786-15eb-43c23eac2cec0" Accept-Ranges: bytes Content-Length: 5611 MS-Author-Via: DAV Connection: close Content-Type: text/html; charset=UTF-8 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"> <html> ...<snip> </html>
The above response headers show the Server: header indicating the version of Apache, various add-on modules, as well as the fact that this platform is running the Debian linux distribution.
Reporting by Hostname (Sample size: 4,929,389 web sites)It should be noted that not all web servers will report back the Host OS signature. In an Apache configuration file, the
ServerTokensdirective can be used to to disable the disclosure of this information. Only configurations that do not specify the
ServerTokensdirective, or set it to
Fullmay reveal sufficient information to allow disclosure of the OS and distribution hosting the server.
In this month's survey, 26,820,235 Apache servers were detected, but only 4,929,389 (18.38%) revealed sufficient information to detect the host OS. The remainder of the survey by host information shown below is based on this subset of Apache servers that revealed the host OS.
OS/Distribution August 2018The following graph and table are based on the same underlying data set as in the previous graphs and table, but with the distinction that we count unique IP addresses instead of unique hostnames, thus getting a more accurate representation of the number of actual web servers installed. (See
Web Survey by IPfor more details).
In this month's survey, 2,308,770 distinct IP Addresses hosted Apache servers, but only 649,805 (28.15%) revealed sufficient information to detect the host OS. The data below is based on this subset of servers that revealed the host OS.
OS/Distribution August 2018Note: Readers are cautioned that the Growth percentages are based on a server's market share penetration rather than the absolute number of servers we detected. Thus, it is possible for the number of servers to increase, while the growth is actually a negative value.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.3