mandiant / GeoLogonalyzer

GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.
Apache License 2.0
195 stars 55 forks source link

FR: make an option to exclude mobile networks #4

Open arkenoi opened 6 years ago

arkenoi commented 6 years ago

If you have a sim card with global data plan, your location may appear weird as your connections would always be routed via home network APN.

davidpany commented 6 years ago

Thank you for the suggestion! I don't think that the free versions of MaxMind or IP2Location include an "is mobile" flag which means that we'd have to build a list of ASN names to match against. This process sounds very error prone. Do you have any suggestions on how to identify mobile providers for free with high fidelity?

m-cameron commented 6 years ago

@davidpany IP2Location has the mobile carrier and usage type in their commercial database. However, some ISP are switching their IP address between fixed line and mobile network, so mobile detection using an IP address is tricky for certain ISP.

davidpany commented 6 years ago

Thanks @m-cameron for the context. Going to leave this feature request open for now, but it might be a long term solution. Feel free to share any ideas that may make sense to implement.