EFForg/rayhunter
Another indicator of IMSI catcher activity (compare public IP with announced IP ranges)
Ouverte
#153 ouverte le 12 mars 2025
Research Questionshelp wantedheuristic
Métriques du dépôt
- Stars
- (5 521 étoiles)
- Métriques de merge PR
- (Merge moyen 5j 12h) (6 PRs mergées en 30 j)
Description
There is an app, called Wiretap Detector that compares your public IP with the announced IP ranges of the mobile operator (of course, you should not be using VPN).
It is using ip.guide service.
With wget, you can get:
- ASN organization:
wget -qO- ip.guide | grep -E 'organization' | sed -E 's/.*"([^"]+)".*/\1/' - country:
wget -qO- ip.guide | grep -E 'country' | sed -E 's/.*"([^"]+)".*/\1/' - your public IP address:
wget -qO- ip.guide | grep -E 'ip' | sed -E 's/.*"([^"]+)".*/\1/' - ASN number of your network:
wget -qO- ip.guide | grep -oP '"asn":\s*\K\d+'
Storing and comparing those data when there is some suspicious network change/activity, would be useful.