Download websites that use Webmin

About Webmin

Server administration through a browser looked eccentric when Webmin appeared in 1997. Editing configuration by hand over a remote shell was the professional norm, and a graphical interface for user accounts, DNS zones, mail spools and package management was aimed at people who ran a machine without wanting to memorise its files. The idea outlasted the scepticism. A generation of small hosting and VPS customers learned server administration through a panel, and Webmin is still installed on that kind of machine.

What a fingerprint means here is narrower than it looks. The panel interface is the surface a stranger could reach, so recognising it means the software answered an unauthenticated request from outside far enough to name itself. For a tool that manages services, users and files on the host with administrative rights, being reachable from the open internet is sometimes a deliberate decision and often an accident of a default configuration nobody revisited.

As of October 2026 we record the panel on 3 sites. The count is small, and the explanation lies in where we look rather than in how common the software is. Our crawl follows websites, while the panel usually listens on a separate port on a machine whose public job is serving somebody else's domains. Installations kept behind a firewall or reachable only over a private tunnel are invisible to us by design, which is the correct outcome for the operator even though it makes our column a floor.

The tool is written in Perl and distributed under a BSD licence, and our catalogue carries no vendor line for it because there is no company to name. Anyone joining this list to the one for the small embedded web server that ships with the panel should expect the two populations to overlap heavily rather than to add up, since one host generally produces both fingerprints.

Two kinds of work need the full file. Security and infrastructure teams map exposed administrative interfaces across a hosting estate, an autonomous system or a country, and a per-host answer is useless for that, because the finding they need is a rate and not an incident. Researchers studying how self-managed servers are actually run need the same population for the opposite reason, which is that the interesting behaviour, defaults left in place and panels forgotten after a migration, only becomes visible when you can count it. Either way the question is about the set, and the set is what a download contains.