Mobile operator of countries by imsi. Gsm spy finder reviews – virtual base station. HLR request and IMSI - example in mailings
Probably even housewives know that public Wi-Fi points unsafe. That doesn’t stop ordinary users from using them with all their might - after all, if you can’t, but you’re bored and really want to, then you can! And without any VPN - although the VPN function is now being implemented even in complex anti-virus products. A regular mobile connection has always been considered a healthy alternative to Wi-Fi, especially since every year it becomes cheaper and faster. But is it as safe as we think? In this article, we decided to collect the main questions and answers regarding the interception of mobile data, and decide whether an ordinary user who is far from hidden secrets should be wary of it.
What is an IMSI interceptor?
This is a device (the size of a suitcase or even just a phone) that uses the design feature of mobile phones - to give preference to the cell tower whose signal is the strongest (in order to maximize signal quality and minimize its own power consumption). In addition, in GSM (2G) networks, only the mobile phone must undergo an authentication procedure (this is not required from the cell tower), and therefore it is easy to mislead it, including in order to disable data encryption on it. On the other side, universal system mobile communications UMTS (3G) requires two-way authentication; however, it can be bypassed by using the GSM compatibility mode found on most networks. 2G networks are still widespread - operators use GSM as a backup network in places where UMTS is not available. More in-depth technical details of IMSI interception are available in the SBA Research report. Another insightful description that has become a reference document for modern cyber counterintelligence is the article “Your Secret Stingray, No Longer Secret at All,” published in the fall of 2014 in the Harvard Journal of Law & Technology.
When did the first IMSI interceptors appear?
The first IMSI interceptors appeared back in 1993 and were large, heavy and expensive. “Long live domestic microcircuits - with fourteen legs... and four handles.” Manufacturers of such interceptors could be counted on one hand, and the high cost limited the range of users - exclusively government agencies. However, now they are becoming cheaper and less bulky. For example, Chris Page built an IMSI interceptor for just $1,500 and introduced him at the DEF CON conference back in 2010. Its version consists of a programmable radio and a free software with open source code: GNU Radio, OpenBTS, Asterisk. All the information a developer needs is in open access. And in mid-2016, hacker Evilsocket offered his version of a portable IMSI interceptor for only $600.
How do IMSI interceptors monopolize access to a mobile phone?
- They trick your cell phone into thinking that this is the only connection available.
- They are configured in such a way that without the mediation of an IMSI interceptor you cannot make a call.
- Read more about monopolization in the publication of the SBA Research Center: IMSI-Catch Me If You Can: IMSI-Catcher-Catchers.
The range of interceptors sold is respectable. What about artisanal crafts?
- Today (in 2017), enterprising technicians are making IMSI interceptors using commercially available high-tech boxed components and a powerful radio antenna, and spending no more than $600 (see the Evilsocket hacker's version of the IMSI interceptor). This applies to stable IMSI interceptors. But there are also experimental, cheaper ones that work unstable. For example, in 2013, a version of the unstable IMSI interceptor was presented at the Black Hat conference. total cost hardware components of which amounted to $250. Today, such an implementation would be even cheaper.
- If, in addition, we take into account that modern Western high-tech military equipment has an open architecture hardware and open source software (this is today a prerequisite to ensure the compatibility of hardware and software systems developed for military needs) - developers interested in making IMSI interceptors have all the trump cards for this. About this modern trend military high-tech can be read in Leading Edge magazine (see the article “The benefits of SoS integration”, published in the February 2013 issue of the magazine). Not to mention, the US Department of Defense recently expressed its willingness to pay $25 million to a contractor that would develop an effective RFID system (see Military Aerospace Monthly, April 2017). One of the main requirements for this system is that its architecture and the components of which it will consist must be open. Thus, open architecture is today a prerequisite for the compatibility of hardware and software systems developed for military needs.
- Therefore, manufacturers of IMSI interceptors do not even need to have great technical qualifications - they just need to be able to select a combination already existing solutions and put them in one box.
- In addition, modern microelectronics, which is becoming cheaper at an exorbitant rate, allows you to fit your handicraft not only into one box, but even (!) into one chip (see the description of the SoC concept) and even more - to configure the on-chip wireless network(see description of the NoC concept at the same link), which replaces traditional data buses. What can we say about IMSI interceptors, when today you can even find technical details about the hardware and software components of the ultra-modern American F-35 fighter in the public domain.
Can I become a victim of "accidental interception"?
Quite possible. Imitating cell tower, IMSI interceptors listen to all local traffic- which, among other things, includes the conversations of innocent passers-by (read “revelations of the big sister of Big Brother”). And this is a favorite argument of “privacy lawyers” who oppose the use of IMSI interceptors by law enforcement agencies who use this high-tech equipment to track down criminals.
How can an IMSI interceptor track my movements?
- Most often, IMSI interceptors used by local law enforcement agencies are used for tracing.
- Knowing the IMSI of the target mobile phone, the operator can program the IMSI interceptor to communicate with the target mobile phone when it is within range.
- Once connected, the operator uses a RF mapping process to figure out the direction of the target.
Can they listen to my calls?
- This depends on the IMSI interceptor used. Interceptors with basic functionality simply record: “there is such and such a mobile phone in such and such a place.”
- To listen to conversations, the IMSI interceptor requires an additional set of functions, which manufacturers build in at an additional cost.
- 2G calls can be easily monitored. IMSI interceptors for them have been available for more than ten years.
- The cost of an IMSI interceptor depends on the number of channels, operating range, encryption type, signal encoding/decoding speed and which air interfaces need to be covered.
Continuation is available only to members
Option 1. Join the “site” community to read all materials on the site
Membership in the community within the specified period will give you access to ALL Hacker materials, increase your personal cumulative discount and allow you to accumulate a professional Xakep Score rating!
JavaScript is blocked in your browser. Please enable JavaScript for the site to function!
Define operator mobile subscriber(MNP API)
In connection with the abolition of mobile slavery and the emergence of the possibility of changing mobile operator(moving to another) while saving the number (MNP), a problem arose due to the unknown to the subscriber of which network you are going to call or send SMS. To determine which operator in Russia a subscriber belongs to, there is a TsNIIS service. If you need to determine the operator mobile phone without entering a captcha or using the API, then use our service, which allows you to determine the ported numbers of Russia, Kazakhstan and other countries:Subscriber Carrier Identification Form (MNP)
To obtain information about the basic binding of a telephone number based on the distribution of DEF codes between telephone operators use the form.
Ported Number Database (PNDB) Statistics
This information reflects the current number of ported numbers as of 02/10/2020, excluding those who returned back to their operator.
Kazakhstan | 520 049 | Telecom operators Kazakhstan | |
Russia | 12 034 493 | Telecom operators Russia |
Statistics are not kept for other countries, but information is provided.
IMSI, MCC, MNP, PLMN
IMSI(International Mobile Subscriber Identity) The last three digits of your IMSI number are the same as the last three digits of the serial number printed on your SIM card. IMSI - corresponds to a specific subscriber. IMSI 25099... corresponds to the Russian (250) operator Beeline (99).
MCC(Mobile Country Code) - a code that determines the country in which the mobile operator is located, consists of 3 decimal digits. For example, for Russia it is 250, the USA - 310, Hungary - 216, China - 460, Ukraine - 255, Belarus - 257.
MNC(Mobile Network Code) - code mobile network(operator). It comes after MCC. Consists of 2 or 3 decimal digits and is unique for each operator. Used for GSM, UMTS, CDMA, Tetra networks. Table of MCC and MNC codes for operators around the world.
Codes MCC And MNP and their corresponding country and operator names are available using API queries. List of MCC codes.
PLMN This is the country code + operator code, i.e. MCC + MNP.
MSIN identification number of the subscriber station - 10 decimal places (to identify the subscriber station within the mobile network to which it is connected).
L.A.C.(Location Area Code) - local area code. In a nutshell, LAC is an association of a number of base stations that are served by one base station controller (BSC). This parameter can be presented in either decimal or hexadecimal format.
CellID(CID) - “cell identifier”. The same sector of the base station. This parameter can also be presented in decimal and hexadecimal format.
MNP API
To obtain information about a mobile subscriber's operator, use the following API request:
Http://site/api/mnp/phone/PHONE?api_key=API_KEY_from_profile
In response you will receive a structure html format or xml or json containing the following fields:
If there is an error, then:
error=error text
If successful, an object containing the following fields is returned:
phone - phone number,
region - Information about the subscriber's region: string ("Unknown") or array ["id","name", ...],
mnc - mnc operator code
country - country, for example RU
oper - Information about the operator ["id","name","brand","mnc"]
message - if there is additional information
oper_from - id code of the operator from whom the number was transferred, if the number was transferred from another
mobile=true - if this subscriber mobile communications
free=true - if it is a toll-free number like 8-800
sputnik=true - satellite phones, very high charge per call
sip=true - this number works using IP telephony technology
For example:
Https://site/json/mnp/phone/79185558000
("status":200, "phone":79185558000, "region":("id":49, "name":"Rostov Region", "okrug":"Southern Federal District", "autocod":61.161, " capital":1711, "english":"Rostov oblast", "iso":"ROS", "country":"RU", "vid":0), "oper":("id":3491, "name ":"MTS", "country":"RU", "mnc":1, "brand":""), "upd":"2018-12-12 08:58:16", "mobile":true , "limit":18)
Example with a transferred subscriber:
Https://site/json/mnp/phone/79153472570
("status":200, "phone":79153472570, "oper":("id":4055, "name":"OJSC \"MegaFon\"", "country":"RU", "mnc":2 ,"brand":"MegaFon", "url":"megafon.ru"), "country":"RU", "mnc":2, "region":("id":1, "name":" Moscow region", "okrug":"Central Federal District", "autocod":"50,90,150,190,177,199", "capital":1, "english":"Moscow oblast", "iso":"MOS", "country" :"RU", "vid":0), "oper_from":1605, "mobile":true, "limit":79122 )
To get an operator by its code, use the query:
Https://site/json/mnp/oper/1605
("status":200, "item":("id":1605, "name":"Mobile TeleSystems", "mobile":1, "mvno":0, "country":"RU", "mnc": 1, "brand":"MTC", "url":"mts.ru", "deleted":null ), "limit":79121)
Common parameters for all API servicesOther services available via API
API request cost and tariffs
Get a phone number in any of 150 countries
If you are planning an international company, you will need local numbers, including toll-free (8-800) numbers. To combine all local numbers into a single call center, you can use SIP telephony
In what other countries is it possible to port a number from one operator to another?
International Mobile Subscriber Identity (IMSI) - an international mobile subscriber identifier (individual subscriber number) associated with each GSM, UMTS or CDMA mobile communications user. When registering on the network, the subscriber’s device transmits an IMSI, which is used to identify it. To avoid interception, this number is sent over the network as rarely (user authentication only) as possible - in cases where this is possible, a randomly generated TMSI is sent instead.
In the GSM system, the identifier is contained on the SIM card in an elementary file (EF) with the identifier 6F07. The format for storing IMSI on a SIM card is described by ETSI in the GSM 11.11 specification. In addition, the IMSI is used by any mobile network connected to other networks (particularly CDMA or EVDO) in the same way as in GSM networks. This number is associated either directly with the phone or with an R-UIM card (analogous to a GSM SIM card in the CDMA system).
The IMSI length is typically 15 digits, but can be shorter. For example: 250-07-ХХХХХХХХХХ. The first three digits are MCC (Mobile Country Code). In the example, 250 is Russia. It is followed by MNC (Mobile Network Code). 07 from the example - SMARTS. The mobile network code may contain two digits according to the European standard or three digits according to the North American standard. All subsequent numbers are directly the user ID MSIN (Mobile Subscriber Identification Number).
IMSI follows the ITU E.212 numbering standard.
IMSI analysis
IMSI analysis is the process of determining whether a subscriber belongs to a network, as well as checking whether a subscriber of this network is allowed to use the services of the network in which he is located.
If the subscriber does not belong to the network in which he is located, the IMSI identifier must be translated into MGT format so that data on it can be obtained from any remote registry. The E.214 standard regulates the mechanism for translating this number into a number, which can then be used for routing in international SS7 networks. Within North America, the IMSI can be translated directly to an E.212 number without modification and can be routed directly to one of the US SS7 networks.
For CDMA operators in roaming, the first 4 digits of (MIN for GSM MSIN) are IRM (International Roaming MIN), and the rest is the subscriber identifier in the network.
Russian mobile network codes
MNC | |||
---|---|---|---|
Code | Operator | Brand | Owner |
01 | OJSC "Mobile TeleSystems" | MTS | OJSC AFK Sistema |
02 | OJSC "MegaFon" | Megaphone | AF Telecom Group |
03 | CJSC "Nizhny Novgorod Cellular Communications" | NSS | OJSC Rostelecom |
05 | CJSC "Yeniseitelecom" | ETC | OJSC Rostelecom |
06 | CJSC "Saratov Cellular Communication System" | Sky Link | 50% OJSC Rostelecom |
07 | Fly | PJSC "Tattelecom" | |
09 | CJSC "Sky Link" | Sky Link | 100% of shares belong to OJSC Rostelecom |
10 | CJSC "Dontelecom" | DTC | MNC is not used |
11 | Scartel LLC | YOTA | OJSC "MegaFon" |
12 | CJSC "Baikalwestcom" | BVK | OJSC Sibirtelecom |
13 | CJSC Kuban-GSM | KUGSM | At the moment, OJSC has been purchased Mobile TeleSystems" and this MNC is not used |
14 | OJSC MegaFon | Megaphone | "Olympic Code" of the MegaFon operator. |
15 | JSC "SMARTS" | SMARTS-Ufa, SMARTS-Ulyanovsk | The main owners are private individuals |
16 | CJSC "New Telephone Company" | NTK | At the moment, VimpelCom OJSC has been purchased and this MNC is not used |
17 | OJSC Uralsvyazinform | Utel | Currently, OJSC Rostelecom has been purchased and this MNC is not used |
20 | Tele2 AB | Tele2 | Investment AB Kinnevik holds 47.9%, the remaining shares are in free circulation |
23 | Mobicom | Mobicom | |
27 | LLC "Your Mobile Technologies" | Fly | PJSC "Tattelecom" |
28 | OJSC "Vympel-Communications" | Beeline | Currently not in use |
35 | LLC "Ekaterinburg-2000" | MOTIVE | No data |
38 | OJSC Rostelecom | Tambov-GSM | Currently purchased by OJSC Rostelecom from OJSC CenterTelecom |
39 | OJSC Uralsvyazinform | Utel | Currently purchased by OJSC Rostelecom and used as base code networks |
99 | OJSC "Vympel-Communications" | Beeline | Alfa Group has 43.9% of voting shares, Telenor has 35.42%, another 20.69% is in free float |
Write a review about the article "IMSI"
Notes
See also
- IMEI - International Mobile Equipment Identity
- MSIN - individual subscriber card number
- MSISDN - telephone number subscriber
Links
Excerpt describing IMSI
- That's how it is! And I puffed up, bg "at, why" like a son of a bitch! - Denisov shouted, without pronouncing the word. - Such a misfortune! Such a misfortune! As you left, so it went. Hey, some tea!Denisov, wrinkling his face, as if smiling and showing his short, strong teeth, began to ruffle his fluffy black thick hair with both hands with short fingers, like a dog.
“Why didn’t I have the money to go to this kg”ysa (the officer’s nickname),” he said, rubbing his forehead and face with both hands. “Can you imagine, not a single one, not a single one?” "You didn't give it.
Denisov took the lit pipe that was handed to him, clenched it into a fist, and, scattering fire, hit it on the floor, continuing to scream.
- Sempel will give, pag"ol will beat; Sempel will give, pag"ol will beat.
He scattered fire, broke the pipe and threw it away. Denisov paused and suddenly looked cheerfully at Rostov with his sparkling black eyes.
- If only there were women. Otherwise, there’s nothing to do here, just like drinking. If only I could drink and drink.
- Hey, who's there? - he turned to the door, hearing the stopped steps of thick boots with the clanking of spurs and a respectful cough.
- Sergeant! - said Lavrushka.
Denisov wrinkled his face even more.
“Skveg,” he said, throwing away a wallet with several gold pieces. “G’ostov, count, my dear, how much is left there, and put the wallet under the pillow,” he said and went out to the sergeant.
Rostov took the money and, mechanically, putting aside and arranging old and new gold pieces in piles, began to count them.
- A! Telyanin! Zdog "ovo! They blew me away!" – Denisov’s voice was heard from another room.
- Who? At Bykov’s, at the rat’s?... I knew,” said another thin voice, and after that Lieutenant Telyanin, a small officer of the same squadron, entered the room.
Rostov threw his wallet under the pillow and shook the small, damp hand extended to him. Telyanin was transferred from the guard for something before the campaign. He behaved very well in the regiment; but they did not like him, and in particular Rostov could neither overcome nor hide his causeless disgust for this officer.
- Well, young cavalryman, how is my Grachik serving you? – he asked. (Grachik was a riding horse, a carriage, sold by Telyanin to Rostov.)
The lieutenant never looked into the eyes of the person he was talking to; his eyes constantly darted from one object to another.
- I saw you passed by today...
“It’s okay, he’s a good horse,” answered Rostov, despite the fact that this horse, which he bought for 700 rubles, was not worth even half of that price. “She started falling on the left front...,” he added. - The hoof is cracked! It's nothing. I will teach you and show you which rivet to use.
“Yes, please show me,” said Rostov.
“I’ll show you, I’ll show you, it’s not a secret.” And you will be grateful for the horse.
“So I’ll order the horse to be brought,” said Rostov, wanting to get rid of Telyanin, and went out to order the horse to be brought.
In the entryway, Denisov, holding a pipe, huddled on the threshold, sat in front of the sergeant, who was reporting something. Seeing Rostov, Denisov winced and, pointing over his shoulder with his thumb into the room in which Telyanin was sitting, winced and shook with disgust.
“Oh, I don’t like the fellow,” he said, not embarrassed by the sergeant’s presence.
Rostov shrugged his shoulders, as if saying: “Me too, but what can I do!” and, having given orders, returned to Telyanin.
Telyanin was still sitting in the same lazy position in which Rostov had left him, rubbing his small white hands.
“There are such nasty faces,” Rostov thought as he entered the room.
- Well, did they tell you to bring the horse? - Telyanin said, getting up and looking around casually.
- I ordered it.
- Let's go on our own. I just came in to ask Denisov about yesterday’s order. Got it, Denisov?
- Not yet. Where are you going?
“I want to teach a young man how to shoe a horse,” said Telyanin.
They went out onto the porch and into the stables. The lieutenant showed how to make a rivet and went home.
When Rostov returned, there was a bottle of vodka and sausage on the table. Denisov sat in front of the table and cracked his pen on paper. He looked gloomily into Rostov's face.
“I’m writing to her,” he said.
He leaned his elbows on the table with a pen in his hand, and, obviously delighted at the opportunity to quickly say in words everything he wanted to write, expressed his letter to Rostov.
“You see, dg,” he said. “We sleep until we love. We are children of pg’axa... and I fell in love - and you are God, you are pure, as on the pieties day of creation... Who else is this? Drive him to Chog’tu. There’s no time!” he shouted at Lavrushka, who, without any timidity, approached him.
- Who should be? They ordered it themselves. The sergeant came for the money.
Denisov frowned, wanted to shout something and fell silent.
International Mobile Subscriber Identity (IMSI) - an international mobile subscriber identifier (individual subscriber number) associated with each GSM, UMTS or CDMA mobile communications user. When registering on the network, the subscriber’s device transmits an IMSI, which is used to identify it. To avoid interception, this number is sent over the network as infrequently (user authentication only) as possible - in cases where this is possible, a randomly generated TMSI is sent instead.
In the GSM system, the identifier is contained on the SIM card in an elementary file (EF) with the identifier 6F07. The format for storing IMSI on a SIM card is described by ETSI in the GSM 11.11 specification. In addition, the IMSI is used by any mobile network connected to other networks (particularly CDMA or EVDO) in the same way as in GSM networks. This number is associated either directly with the phone or with an R-UIM card (analogous to a GSM SIM card in the CDMA system).
The IMSI length is typically 15 digits, but can be shorter. For example: 250-07-ХХХХХХХХХХ. The first three digits are MCC (Mobile Country Code). In the example, 250 is Russia. It is followed by MNC (Mobile Network Code). 07 from the example - SMARTS. The mobile network code may contain two digits according to the European standard or three digits according to the North American standard. All subsequent numbers are directly the user ID MSIN (Mobile Subscriber Identification Number).
IMSI analysis
IMSI analysis is the process of determining whether a subscriber belongs to a network, as well as checking whether a subscriber of this network is allowed to use the services of the network in which he is located.
If the subscriber does not belong to the network in which he is located, the IMSI identifier must be translated into MGT format so that data on it can be obtained from any remote registry. The E.214 standard regulates the mechanism for translating this number into a number, which can then be used for routing in international SS7 networks. Within North America, the IMSI can be translated directly to an E.212 number without modification and can be routed directly to one of the US SS7 networks.
For CDMA operators in roaming, the first 4 digits of (MIN for GSM MSIN) are IRM (International Roaming MIN), and the rest is the subscriber identifier in the network.
Russian mobile network codes
MNC | |||
---|---|---|---|
Code | Operator | Brand | Owner |
01 | PJSC "Mobile TeleSystems" | MTS | PJSFC Sistema |
02 | PJSC MegaFon | Megaphone | AF Telecom Group |
03 | CJSC "Nizhny Novgorod Cellular Communications" | NSS | PJSC Rostelecom |
05 | CJSC "Yeniseitelecom" | ETC | PJSC Rostelecom |
06 | CJSC Saratov System cellular communications» | Sky Link | 50% PJSC Rostelecom |
07 | Fly | PJSC "Tattelecom" | |
08 | JSC "Vainakh Telecom" | Vainakh Telecom | |
09 | CJSC "Sky Link" | Sky Link | 100% of shares belong to PJSC Rostelecom |
10 | CJSC "Dontelecom" | DTC | MNC is not used |
11 | Scartel LLC | YOTA | PJSC MegaFon |
12 | CJSC "Baikalwestcom" | BVK | PJSC Sibirtelecom |
13 | CJSC Kuban-GSM | KUGSM | PJSC Mobile TeleSystems was purchased and this MNC is not used |
14 | PJSC MegaFon | Megaphone | "Olympic Code" of the MegaFon operator. |
15 | PJSC "SMARTS" | SMARTS-Ufa, SMARTS-Ulyanovsk | The main owners are private individuals |
16 | LLC "Miatel" | MIATEL | LLC "MiATel" |
17 | PJSC Uralsvyazinform | Utel | Purchased by PJSC Rostelecom and this MNC is not used |
20 | T2 RTK Holding LLC | Tele2 | PJSC "Rostelecom" |
23 | Mobicom | Mobicom | Not used |
27 | LLC "Your Mobile Technologies" | Fly | PJSC "Tattelecom" |
28 | PJSC "Vympel-Communications" | Beeline | Not used |
35 | LLC "Ekaterinburg-2000" | MOTIVE | No data |
38 | PJSC Rostelecom | Tambov-GSM | Purchased by PJSC Rostelecom from PJSC CenterTelecom |
39 | PJSC Uralsvyazinform | Utel | Purchased by PJSC Rostelecom and used as the base network code |
42 | OJSC “Multiregional TransitTelecom” | MTT Russia | |
62 | Tinkoff Mobile LLC | Tinkoff | JSC Tinkoff Bank |
99 | PJSC "Vympel-Communications" |