Skip to main content
Acepeak
Grey Route & SIM-Box Detection

Stop signalling that should not be there.

Block illegitimate SS7 message injection and spoofed signalling before it reaches your network.

SS7MAPISUPPassive taps
Signalling traceTapped · Live
Messages checked
48,210
Injected, stopped
312
Partners watched
4
Outside partnerSS7 firewallYour networkMT-ForwardSM · known GTSRI-for-SM · injectedNever reaches the networkTAPPassive taps copy the signalling, so routing is never touched.

Illustrative

SS7 · MAP · ISUP
Signalling read from passive taps
Injection
Illegitimate SS7 traffic is stopped
Spoofing
Spoofed signalling is caught
Reversible
Every verdict logged with its reasons
Spot the difference

Two messages, one of them false.

Illegitimate SS7 traffic injected from outside partners looks real at a glance. Checked field by field, it is not.

FieldGenuineInjected
MessageMAP MT-ForwardSMMAP SRI-for-SM
Calling global title+44 7700 900231+44 7700 900479
Arrived fromRegistered partner PR-1Outside partner, unlisted
Expected signalling routePR-1 → home STPNo agreement on this path
Reputation graphKnown and cleanSeen in other attacks
VerdictAllowBlock

Illustrative

On the wire

Every signal, judged on arrival.

MAP and ISUP signalling is evaluated for illegitimate message injection and illegitimate call setups, in real time.

ss7 · signalling feedTapped
09:41:00MAP MT-ForwardSM+44 7700 900231Allow
09:40:53MAP MT-ForwardSM+44 7700 900118Allow
09:40:46MAP SRI-for-SM+44 7700 900479Block
09:40:39ISUP IAM+44 7700 900734Flag
09:40:32MAP MT-ForwardSM+44 7700 900231Allow
09:40:25MAP UpdateLocation+44 7700 900612Block
09:40:18ISUP IAM+44 7700 900118Allow

Illustrative

How it stops

Observe, check, confirm, stop.

Passive taps mean no routing change and no impact on legitimate traffic.

1
Observe

Taps on SS7, SMPP and SIP capture all the signalling, with no change to routing.

SS7SMPPSIP
2
Check

Each message is checked against where it should have come from.

PR-1
EXT-9
3
Confirm

Suspects are cross-checked against the shared reputation graph.

Reputation graph7 / 100
4
Stop

Illegitimate SS7 traffic injected from outside partners is stopped, and logged.

BlockedLogged · reversible
Partner links

Trust, link by link.

Suspects are cross-checked against the shared reputation graph, and a sudden shift on a route triggers an alert and a block.

LinkTypeTrustStatus
Link PR-1
Registered partner
Allowed, 24 h
4,120
Blocked, 24 h
0
Verdict
Traffic flows

Illustrative · pick a link

FAQ

Questions, answered.

It is illegitimate SS7 message injection and spoofed signalling, such as traffic injected into your network from outside partners. Acepeak blocks it.

Close the door on false signalling.

Talk to partnerships about stopping SS7 injection on your network.

Talk to Partnerships Overview