AntiHunter DIGI Node

Distributed 2.4 GHz signal-intelligence & counter-surveillance node — WiFi, BLE, drones, and the attacks aimed at you, on one palm-sized board.

Featured in Seeed Studio's Best 20 XIAO Projects of 2025.

Physical & digital tripwire that learns your environment

AntiHunter is a distributed 2.4 GHz signal-intelligence node. Every network, phone, laptop, and drone within range is broadcasting — it reads all of it, learns what belongs on your ground, and trips the instant something doesn't:

• A new device lingering at your fence line.
• A drone entering your airspace, with its pilot's location.
• An attack on your network, named down to the tool that launched it.
• A hand on the node itself

One node is a standalone sensor with its own dashboard. Three nodes talking over LoRa mesh — kilometers apart, no internet, no cellular — become a distributed perimeter that can put a hostile transmitter on a map.

Learn more on the website

Three deployments, one system

1. The property line

You have 40 acres and no idea who walks it at night. Nodes on the fence posts feel vibrations and learn every device that belongs — yours, your family's, the mail carrier's — then alert over mesh when a stranger's device crosses in, even if it's randomizing its MAC. A wireless trail camera that sees through walls and tree lines, your own digital & physical trip-wire.

2. The facility

You run security for a site that keeps getting hit with WiFi attacks. Sentinel names the attack tool — bettercap, mdk4, marauder, hcxdumptool — from frame signatures and behavior, cross-references the attacker's rotating MACs into one persistent identity, and three GPS nodes narrow down roughly where they're standing. Feed it all into the open-source Command Center: live maps, geofences, TAK/CoT to your ATAK tablets, webhooks to your SOC.

3. The forward deployment

No outlets, no internet, no infrastructure. Nodes run on 18650s, coordinate entirely over LoRa, and operate fully headless with zero WiFi footprint. Drone Remote ID hits — aircraft, telemetry, pilot position — broadcast mesh-wide in seconds. Arm the tamper trip, and if someone pulls a node it securely wipes the SD and NVS — leaving nothing but an innocuous weather-monitor file where the logs used to be.

What every node detects

• Target Scan — watchlist of MACs, OUI prefixes, or SSIDs; instant mesh alert on a hit
• Device Scanner — every WiFi and BLE device in range: RSSI, name, and channel on WiFi
• Probe Request Scanner + Ghost SSIDs — the networks devices silently call out for, flagged when no AP answers during the scan: home, work, travel history
• Baseline Anomaly Detection — learns normal, then flags new devices and sustained RSSI shifts
• MAC Randomization Correlation — behavioral fingerprinting links rotating addresses to one persistent identity; 256 identities, 128 MACs each (experimental)
• Deauth Attack Detection — real-time deauth/disassoc with source tracking
• Sentinel Counterintel — names the tool behind an attack; deauth/beacon/auth floods, SAE DoS, karma, evil-twin, handshake capture — each detector toggleable (beta)
• Drone RID Detection — ODID/ASTM F3411 + French ID: drone ID, pilot location, telemetry
• Triangulation — 3+ GPS nodes estimate a target's approximate position: Kalman-filtered, GPS-weighted, confidence-scored, map pin (experimental)

Set & forget operation

• LoRa mesh (Meshtastic) — alerts, commands, and coordination across kilometers; every mode controllable per-node or broadcast
• Tamper + secure wipe — vibration-armed or remote token-authed erase of SD + NVS, leaving only a decoy weather-monitor file as cover
• Battery Saver, Target Allowlist, Data Explorer — sip power, skip known gear on target scans, audit every SD log
• Three ways to drive it — web dashboard, mesh commands (fully headless), or HTTP/JSON API

Why AntiHunter

• No subscription. No cloud. No account. Your data lives on your SD card. A comparable enterprise RF sensor runs ~$15,000, a fixed multi-sensor site runs $120,000+, and the license isn't optional — the hardware stops working without it. Each still covers only a slice of what one node does.
• Defensive by design. Built for lawful, authorized use: AntiHunter does not attack or disrupt RF.
• Open source (AGPL-3.0): firmware, 3D print files, and C2. Browser flasher, stable and beta channels.

Pick your tier

What's in the box

Tier 3 — Soldered Core PCB:

• DIGI Node PCB (Circular 82 mm, 2-layer, copper ground plane)
• XIAO ESP32-S3
• Heltec LoRa V3.2
• ATGM336H GPS
• SW-420 tamper sensor
  
• Micro-SD module
• DS3231 RTC
• 6× JST 2.54 connectors
• 3x Factory U.FL antennas included (GPS, 2.4GHz, LoRa)
• Built/tested

Tier 2 — Parts Kit (Tier 3 plus):

• 1x 6 dBi 2.4 GHz + 1x 6 dBi LoRa antennas
• 3× U.FL→ SMA pigtail
  
• KSD9700 on-wire thermal switch (40 deg. C)
• Toggle switch with waterproof cap
  
• USB-C waterproof input connector
• Fan prewired with JST 2.54 male
• 3D-printed enclosure (unassembled, standard version*)
• Melt-in M3 lid/PCB insets, ¼" tripod inset
• TPU enclosure seals
• 2x M3x15mm brass standoffs
• 2S 18650 UPS power board
• 2x JST 2.54 male for temp sensor/switch
• All required fasteners

Tier 1 — Assembled (Tier 2 plus):

• Fully assembled DIGI node, ready to run
• 16 GB SD card
• Active GPS helix SMA antenna
• Built/tested

NOTE: Batteries are not included due to shipping regulations. Default case is battle tested, thinner without bottom USB-C. Send us a message for special requests before ordering.

Deploying 3+ GPS-equipped nodes unlocks triangulation.

How AntiHunter compares

Everything else is a fixed-site appliance — bolted to a wall, fed by PoE, licensed by the year. AntiHunter is the only one you can hang on a fence post two kilometers from the nearest outlet and still have a working perimeter.

Public estimates & vendor datasheets, July 2026. "—" = not advertised.

Specs

• 2.4 GHz WiFi (b/g/n) + BLE
• LoRa via Meshtastic (region-specific)
• Seeed XIAO ESP32-S3 (8 MB flash)
• Heltec LoRa V3.2/T114
• ATGM336H GPS
• Micro-SD Storage
• DS3231 RTC
• SW-420 tamper sensor
• KSD9700 thermal switch + fan
• 82 mm 2-layer PCB: copper ground plane, mounting holes, digital & physical passthrough, SMD breakout pads
• Power: 5V USB, battery pack, or included 2S 18650 UPS; accepts 5V solar or standard USB power (Solar panels not included).

• AGPL-3.0 & MIT open-source, browser flasher, CLI, PlatformIO

  ---

Resources

• Getting Started: DIGI Node PCB
• Assembly Manual (PDF)
• PCB welcome letter
• Parts Links & Images

Open Source, Easy Updates

• Firmware
• Command Center C2
• Assembly manual + STLs in the repo hw/ folder

• Web flasher/configure tool for modifying your node settings and updating firmware.

  Notes

Use grease on the housing seals and swap in straight antennas if in wet conditions

Built for lawful, authorized use only. Legal disclaimer.

Ships within the contiguous 48 US states via USPS Ground Advantage or Priority Mail.

- PCBs are bagged, sealed, and shipped in a bubble mailer. Orders of 6 or more ship boxed via USPS Priority Mail.

- Parts kits/assembled units are bagged, hex-paper padded and ship boxed. Assembled units ship in ESD bags.

- Dispatch is typically 1–3 business days when in stock.

- Every shipment includes a tracking number and $100 USPS insurance.

Recipient name must match the delivery address. USPS returns packages addressed to an unrecognized name at a given address, and return-to-sender delays apply.

No shipping to Alaska, Hawaii, Puerto Rico, or US territories. Orders to those destinations are cancelled and refunded.