Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

Does anyone have any statistics on how much of the total of the world's website traffic is malicious? Every day I am amazed by the number of requests for .dll and similar things which don't appear anywhere on my (static) website. What proportion of the world's web traffic is like this?

(It says that this "appears subjective and is likely to be closed" so I'm marking it community wiki.)

share|improve this question
    
Hmm, is this question likely to lead to argument? –  delete Jul 9 '10 at 2:57
    
View it live on Akamai: akamai.com/html/technology/dataviz1.html –  pritaeas Mar 30 '12 at 11:48

1 Answer 1

Going through my server's access logs, its actually relatively low (for me), approximately 5-7%. The funny thing is, I'm using Linux but hide the server signature, so of the 5-7% of 'bad' requests, most of those are trying common Windows exploits.

Occasionally I see someone trying to play with form data, looking for accessible installations of phpmyadmin, trying ancient wordpress vulnerabilities, etc. However, by way of comparison, its rare.

Note, that's just HTTP traffic. Its very common for most connection attempts to mail / ssh / ftp servers to be bogus / brute force attempts.

It is possible to generate statistics here, but that's statistics per domain. You can't just 'average' all of those and come up with a number, that makes the bad assumption that all attacks are just random trial and error attempts to find something vulnerable.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.