RF Privacy — Counter-Sensing Audit
5 emitters tracked · 2 above the sensing-risk floor · posture 55/100
Spectrum Sweep2.4 / 5 / 6 GHz occupancy
LIVE
RF Inventorylayer 1 · what is transmitting here
2 new today
| Emitter | Vendor | Class | RSSI | Sensing score | Risk |
|---|---|---|---|---|---|
<hidden> 3C:71:BF:1A:4E:20 | Espressif (ESP32-S3) 2.4 GHz · ch 6 | Active | -46 dBm | [████████] 94% | critical |
GuestNet-2 D8:3A:DD:07:C1:9B | Raspberry Pi (BCM43455) 5 GHz · ch 44 | Semi-passive | -58 dBm | [██████··] 71% | high |
— unknown (rx-only) | unidentified 5 GHz · ch 36 | Passive | -74 dBm | [███·····] 38% | medium |
CORP-WIFI F0:9F:C2:33:12:8E | Ubiquiti 5 GHz · ch 100 | Semi-passive | -52 dBm | [█·······] 11% | low |
printer-lobby A4:CF:12:9D:70:11 | Espressif (ESP8266) 2.4 GHz · ch 11 | Active | -63 dBm | [████····] 44% | medium |
Multipath Driftlayer 3 · environmental anomaly
peak 0.64
The same empty-room baseline that powers occupancy detection flags foreign reflectors and unexplained variance. A dwelling receiver changes the channel it is measuring — that is the only handle physics gives us on a silent listener.
<hidden>E-01
critical
BSSID
3C:71:BF:1A:4E:20
Vendor
Espressif (ESP32-S3)
Band / ch
2.4 GHz · 6
First seen
Today 01:12
Beacon-less transmitter emitting 100 Hz null-data packets — classic esp-csi capture cadence.
NDP burst 100/s, 52 subcarriers, no client association
CFO +2.1 kHz · IQ imbalance 0.031 · ramp 4.8 µs
Sensing score[███████████·] 94%
RF Timelinelayer 5 · behavioural baseline
- New emitter01:12E-01 · Hidden-SSID ESP32 appeared 4 m from the lobby sensor.
- NDP burst01:09E-01 · 100 Hz null-data packets with no associated client.
- BFI polling spike00:52E-02 · 38 beamforming reports/s harvested from 4 clients.
- Multipath drift00:41CSI variance in Meeting Room A above the learned envelope.
- LO leakage22:05E-03 · Receive-only candidate inferred from oscillator leakage.
- Baseline rebuilt21:30Empty-room fingerprint re-learned after furniture change.
