use libloc to looking up network information from an IP address
What network services an app uses tells a lot about what that app is doing, especially when looking for trackers. mobilsicher's main review tool is network activity. Occasionally, when a hostname does not reveal much information, the owner of the IP address can provide key information. libloc is a tool that does that. It includes Python bindings, and claims to be really fast at lookups: https://location.ipfire.org/how-to-use
libloc should be:
- Packaged for Debian (should be easy) https://source.ipfire.org/releases/libloc/
- Include in modules/active-hostnames.py once that is reenabled: !42 (merged)
As a side benefit, Guardian Project and Tor Project both need libloc to generate the geoip and geoip6 files that Tor daemon needs. https://gitlab.torproject.org/tpo/network-health/metrics/geoip-data
Edited by Hans-Christoph Steiner