WiGLE Review
Crowdsourced wireless network database mapping billions of Wi-Fi, Bluetooth, and cell networks globally
Quick Verdict
OSINT investigators and security researchers geolocating devices or networks, confirming whether a specific wireless network was present at a location at a given time, or understanding the wireless landscape of a target area
Pros
- + 600+ billion network records — the largest public wireless network database in existence
- + Maps Wi-Fi, Bluetooth, and cell tower locations with geographic coordinates
- + Searchable by BSSID (MAC address), SSID (network name), or geographic area
- + API available for registered users — no payment required
- + Android app for contributing war-driving data; passive collection also supported
- + Historical records show when a network was first and last observed
Cons
- − Coverage density varies dramatically by geography — major cities are well-documented; rural areas sparse
- − Data depends on volunteer war-driving contributions — quality and freshness vary
- − SSID search results are broad — common network names (like 'NETGEAR' or 'xfinitywifi') return millions of results
- − BSSID search gives specific results but requires knowing the MAC address of a target network
- − Privacy implications are significant — using WiGLE to track individuals via their home Wi-Fi BSSID is an ethical concern
What WiGLE Is
WiGLE is a massive collaborative database of observed wireless networks, compiled since 2001. With over 600 billion Wi-Fi networks, Bluetooth devices, and cell towers logged, it is the world's largest public database of wireless infrastructure locations. Contributors use the WiGLE Android app and other war-driving tools to feed the database, making it a go-to geolocation resource for OSINT investigators.
Given a Wi-Fi network's BSSID or SSID, WiGLE returns the geographic coordinates where that network has been observed. This is a game-changer for location inference from wireless data without GPS metadata. I have used WiGLE to track down devices in the field, and it is astonishing how accurate it can be.
The Core OSINT Use Case
Devices constantly transmit Wi-Fi probe requests, which contain BSSIDs of networks they've previously connected to.
Capturing these requests allows for cross-referencing against WiGLE to obtain the physical location of that network. The inference chain is: device, known networks, network location, device's previous locations.
This technique is used in digital forensics, appearing in mobile device investigation and OSINT cases, where physical location history is crucial.
A smartphone on a corporate network sends probe requests for three previous networks: a home address, a coffee shop in a specific city, and one that isn't in WiGLE. Two data points give a good idea of the device's physical location history.
What You Can Search
Searching WiGLE
You can query BSSIDs. Enter a MAC address, and WiGLE tells you where that wireless network has been seen, when it first showed up, and when it was last logged. That's the forensic angle.
Network Types
Search by SSID to find all instances of a specific network name. This is useful for corporate or residential networks, including companies, homes, and public places.
Browsing the Map
The map view lets you browse wireless networks by area. The density of networks and types of networks give you a sense of development and population.
Cell Towers
WiGLE catalogues cell towers. GSM, CDMA, LTE are all searchable by tower ID. Handy when you need to map cell towers to physical locations.
API Access
WiGLE's free API access is for registered accounts. You can query information like on the site: BSSID, SSID, location, and stats. The rates are limited, but suitable for research.
Here's a Python BSSID lookup example:
import requests
API_KEY = "your_api_key_here"
BSSID = "AA:BB:CC:DD:EE:FF"
To access the Wigle API, I made a GET request to https://api.wigle.net/api/v2/network/search?netid={BSSID}.
The request headers included my API_KEY in both the username and password fields.
The code for this request looks like this:
I used the requests library to send the GET request, passing in my API_KEY for both authentication fields.
The response was returned as JSON and loaded into the results variable.
Here is the code:
```python
import requests
resp = requests.get(
f"https://api.wigle.net/api/v2/network/search?netid={BSSID}",
auth=(API_KEY, API_KEY)
)
results = resp.json()
Ethical and Privacy Considerations
WiGLE maps Wi-Fi networks to GPS coordinates. Residential and private networks are out there in the open. Most people don't realize their home network's location is public record.
Using WiGLE to find someone's home address crosses a line. The data's out there, but how you use it matters.
WiGLE is useful for real work, including forensic analysis, authorized investigations, security research, infrastructure analysis, and geospatial research.
Misuse includes tracking people, monitoring device history without permission, or staking out individuals. WiGLE's terms ban stalking, harassment, and targeted surveillance.
Practical Limitations
Coverage gaps are a big problem. WiGLE's maps are only as good as where war-drivers have driven. The US, Western Europe, Japan, and Australia have solid coverage. Everywhere else is not so well covered. Rural areas often haven't been updated in years, or they're just plain missing.
Mobile networks are constantly in motion. A BSSID on WiGLE might have been a travel router, a vehicle hotspot, or a device that's long gone. WiGLE shows where a network was spotted, not where it is now. MAC randomization also causes issues. Smartphones and some laptops randomize their MACs when probing. The probe to BSSID to location chain is broken. Many devices still send real MACs sometimes. Older devices don't randomize, which is still usable.
Reviewed April 2026. Tool available at wigle.net.
See Also
Network Recon Tools
Network reconnaissance, or network recon, is about gathering information on a target network. This includes IP addresses, domain names, and open ports. The goal is to create a profile of the network.
Tools for Network Recon
Shodan indexes internet infrastructure, including servers, cameras, routers, and industrial systems. Anything listening on an open port gets catalogued. Banners tell you what's running, version numbers, sometimes config details. The OSINT value is that you know what a target has exposed before you ever send a packet their way. Operators miss things, dev servers get forgotten.
Masscan scans IP ranges fast, finding hosts and services. No config is required. It is used for quick and dirty scans.
Nmap probes networks, finding hosts, services, and OS. It is scriptable. It is used when you need details.
Wappalyzer identifies tech stacks, including server software, plugins, and frameworks. It is useful for web app security tests.
Netcat reads and writes network connections, using TCP, UDP, or raw. It is simple but powerful.
Choosing a Tool
Each tool serves a purpose. Shodan is used for broad searches, Masscan for fast scans, Nmap for detailed probing, Wappalyzer for tech stack ID, and Netcat for raw network interactions.
Further Learning
Learn more about domain and IP OSINT in our Domain and IP OSINT Guide. Compare tools in our Best Network Recon Tools guide.
Network Recon Tools Comparison
The following is a comparison of network recon tools. Shodan, Masscan, Nmap, Wappalyzer, Netcat. They differ in focus, speed, and config requirements.
Shodan focuses on broad internet scans, and is fast, with no config required. Masscan focuses on fast IP range scans, and is very fast, with minimal config required. Nmap focuses on detailed host scans, and is medium in speed, with yes config required. Wappalyzer focuses on tech stack ID, and is fast, with no config required. Netcat focuses on raw network interactions, and is flexible, with minimal config required.
Example Use Cases
Use Masscan to scan an IP range quickly. Use Nmap for a detailed network map.
Understanding your tools helps, practice makes perfect.
Further Reading
Tool Relationships
Similar Tools
RTL-SDR Blog V4
The standard $40 software-defined radio dongle for ADS-B aircraft tracking, AIS ship tracking, and weather satellite imagery.
Nooelec NESDR SMArt v5
The RTL-SDR alternative with tighter frequency accuracy and a complete antenna bundle — better value than the V4 if you don't need shortwave.
Flightradar24
Real-time and historical flight tracking via a global ADS-B receiver network
SkyOSINT
Real-time satellite tracking and space intelligence platform combining orbital data with geopolitical analysis
Community Rating
Ratings from security researchers. No third-party tracking.
Rate this tool:
This review reflects testing as of 2026-04-03. OSINT tools change frequently — check the vendor's current documentation for pricing and feature updates. Report an error →