Threat Level: green Handler on Duty: Manuel Humberto Santander Pelaez

SANS ISC: ISC Feature of the Week: The 404Project SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
ISC Feature of the Week: The 404Project

The 404Project is a simple snippet of code you add to your 404 error page that submits information back to ISC for reporting. The main purpose of this project is to trend the web pages crawlers and automated bots are trying to access. A public report page will be available when enough data had been collected. isc.sans.edu/tools/404project.html

Overview
The 404Project submits URI, IP and USER AGENT. Additionally, date, time and your credentials are stored along with the data. Your personal information is protected https://isc.sans.edu/privacy.html#4 and your specific user information is not shared with third parties. https://isc.sans.edu/privacy.html#1
 

Instructions
- You must have an ISC Portal ID and Identification Key to use this tool. https://isc.sans.edu/login.html
- Once logged in and submitting data, you can view your 404 summary information. https://isc.sans.edu/my404.html
- Get started! https://isc.sans.edu/tools/404project.html#instructions

Our skilled users have ported the 404Project to many languages! At the time of this writing, in addition to the original PHP, there is also Perl, Python, .NET and even Javascript! https://isc.sans.edu/tools/404project.html#alternatives

You can leave comments in the section below or send any questions or comments in the contact form https://isc.sans.edu/contact.html

--
Adam Swanger, Web Developer (GWEB)
Internet Storm Center (http://isc.sans.edu)

 

AdamS

86 Posts
I hereby withdraw my consent to having my IP address recorded, stored and/or transmitted to third parties by SANS, DSHIELD or the 404 project at any time, in accordance with EU data protection and privacy laws.

I strongly disapprove that this project aims to record and store IP address and URI combinations of people encountering an 404 error. From my perspective as a data privacy advocate this seems to be subverting privacy agreements and laws en masse. While your intentions might be honorable,
I feel it is most irresponsible to collect users IP addresses throughout the internet without the users explicit permission to do so.

An otherwise great fan of your work.

Stop SOPA! Stop PIPA! Stop SANS!
Anonymous
Interesting perspective and I understand it. Instead of just saying NO This or No That, I'd rather see alternatives proposed that balance everyone's rights versus simply protecting individual rights and preserving the status quo.
Dean

135 Posts

Sign Up for Free or Log In to start participating in the conversation!