EFForg/rayhunter

Another indicator of IMSI catcher activity (compare public IP with announced IP ranges)

開放

#153 建立於 2025年3月12日

 (7 則留言) (2 個反應) (1 位負責人)Rust (447 個分叉)github user discovery
Research Questionshelp wantedheuristic

倉庫指標

星標
 (5,428 顆星)
PR 合併指標
 (平均合併 5天 12小時) (30 天內合併 6 個 PR)

描述

There is an app, called Wiretap Detector that compares your public IP with the announced IP ranges of the mobile operator (of course, you should not be using VPN).

It is using ip.guide service.

With wget, you can get:

  • ASN organization: wget -qO- ip.guide | grep -E 'organization' | sed -E 's/.*"([^"]+)".*/\1/'
  • country: wget -qO- ip.guide | grep -E 'country' | sed -E 's/.*"([^"]+)".*/\1/'
  • your public IP address: wget -qO- ip.guide | grep -E 'ip' | sed -E 's/.*"([^"]+)".*/\1/'
  • ASN number of your network: wget -qO- ip.guide | grep -oP '"asn":\s*\K\d+'

Storing and comparing those data when there is some suspicious network change/activity, would be useful.

貢獻者指南