AntiHunter DIGI Node

Distributed 2.4 GHz signal-intelligence & counter-surveillance node — WiFi, BLE, drones, and the attacks aimed at you, on one palm-sized board.
Featured in Seeed Studio's Best 20 XIAO Projects of 2025.

A physical & digital tripwire that learns your environment

AntiHunter is a distributed 2.4 GHz signal-intelligence node. Every network, phone, laptop, and drone within range is broadcasting — it reads all of it, learns what belongs on your ground, and trips the instant something doesn't:

• A new device lingering at your fence line.
• A drone in your airspace, with its pilot's location.
• An attack on your network, named down to the tool that launched it.
  

One node is a standalone sensor with its own dashboard. Three nodes talking over LoRa mesh — kilometers apart, no internet, no cellular — become a distributed perimeter that can put a hostile transmitter on a map.

Learn more on the website

Stock is replenished on a rolling basis. We're early on in the rollout, quantities per order may be limited.

Three deployments, one system

1. The Property Line

You have 40 acres and no idea who walks it at night. Nodes on the fence posts feel vibrations and learn every device that belongs — yours, your family's, the mail carrier's — then alert over mesh when a stranger's device crosses in, even if it's randomizing its MAC. A wireless trail camera that sees through walls and tree lines, your own digital & physical trip-wire.

2. The Facility

You run security for a site that keeps getting hit with WiFi attacks. Sentinel names the attack tool — bettercap, mdk4, marauder, hcxdumptool — from frame signatures and behavior, cross-references the attacker's rotating MACs into one persistent identity, and three GPS nodes narrow down roughly where they're standing. Feed it all into the open-source Command Center: live maps, geofences, TAK/CoT to your ATAK tablets, webhooks to your SOC.

3. The Forward Deployment

No outlets, no internet, no infrastructure. Nodes run on 18650s, coordinate entirely over LoRa, and operate fully headless with zero WiFi footprint. Drone Remote ID hits — aircraft, telemetry, pilot position — broadcast mesh-wide in seconds. Arm the tamper trip, and if someone pulls a node it securely wipes the SD and NVS — leaving nothing but an innocuous weather-monitor file where the logs used to be.

What it does

• Target Scan — watchlist of MACs, OUI prefixes, or SSIDs; instant mesh alert on a hit
• Device Scanner — every WiFi and BLE device in range: RSSI, name, and channel on WiFi
• Probe Request Scanner + Ghost SSIDs — the networks devices silently call out for, flagged when no AP answers during the scan: home, work, travel history
• Baseline Anomaly Detection — learns normal, then flags new devices and sustained RSSI shifts
• MAC Randomization Correlation — behavioral fingerprinting links rotating addresses to one persistent identity; 256 identities, 128 MACs each (experimental)
• Deauth Attack Detection — real-time deauth/disassoc with source tracking
• Sentinel Counterintel — names the tool behind an attack; deauth/beacon/auth floods, SAE DoS, karma, evil-twin, handshake capture — each detector toggleable (beta)
• Drone RID Detection — ODID/ASTM F3411 + French ID: drone ID, pilot location, telemetry
• Triangulation — 3+ GPS nodes estimate a target's approximate position: Kalman-filtered, GPS-weighted, confidence-scored, map pin (experimental)

Set & forget operation

• LoRa mesh (Meshtastic) — alerts, commands, and coordination across kilometers; every mode controllable per-node or broadcast
• Tamper + secure wipe — vibration-armed or remote token-authed erase of SD + NVS, leaving only a decoy weather-monitor file as cover
• Battery Saver, Target Allowlist, Data Explorer — sip power, skip known gear on target scans, audit every log later.
• Three ways to drive it — web dashboard, mesh commands (fully headless), or HTTP/JSON API

Why AntiHunter

• No subscription. No cloud. No account. Your data lives on your SD card. A comparable enterprise RF sensor runs ~$15,000, a fixed multi-sensor site runs $120,000+ license fees. Each still covers only pieces what one node does.
• Defensive by design. Built for lawful, authorized use: AntiHunter does not attack or disrupt RF.
• Open source (AGPL-3.0): firmware, 3D print files, and C2. Browser flasher, stable and beta channels.

Choose your tier

What's in the box

Tier 3 — Soldered Core PCB:

• DIGI Node 2 layer PCB
• 1× Seeed XIAO ESP32-S3
• 1× Heltec WiFi LoRa 32 V3.2
• 1× ATGM336H GPS Module
• 1× SW-420 Vibration Sensor
  
• 1× MicroSD Module
• 1x DS3231 RTC
• 6× JST 2.54 2-Pin Female Terminals
• 3x Factory U.FL antennas included (GPS, 2.4GHz, LoRa)
• Built/tested/flashed (latest Meshtastic & AH stable)

Tier 2 — Parts Kit (Tier 3 plus):

• 1x 6 dBi 2.4 GHz + 1x 6 dBi LoRa antennas
• 1x 2S 18650 UPS power board (ESD sealed)
• 2x JST 2.54 male for temp & switch
• 3× U.FL→ SMA pigtail
  
• 1x KSD9700 on-wire thermal switch (40 deg. C)
• 1x Toggle switch with waterproof cap
  
• 1x USB-C waterproof input connector
• 1x Fan prewired with JST 2.54 male
• 1x 3D-printed enclosure (unassembled, standard version*)
• TPU enclosure seals set (housing, usb, gps base)
• 10x Melt-in M3 lid/PCB insets
• 1x ¼" tripod inset
• 2x M3x15mm brass standoffs (bottom of PCB to case lid)
• 14x M3 hex flat head screws

Tier 1 — Assembled (Tier 2 plus):

• Fully assembled DIGI node, ready to run
• 16 GB SD card
• Active GPS helix SMA antenna
• Built/tested/flashed (latest Meshtastic & AH stable)

NOTE: Batteries are not included due to shipping regulations.

Default case is battle tested, thinner without bottom USB-C. Send us a message for special requests before ordering. Solar panels are not included. Deploying 3+ GPS-equipped nodes unlocks triangulation.

How it compares

Enterprise is a fixed-site appliance, licensed by the year. AntiHunter is the only one you can hang on trees kilometers apart, without any infra.

Public estimates & vendor datasheets, July 2026. "—" = not advertised.

Specs

• 2.4 GHz WiFi (b/g/n) + BLE
• LoRa via Meshtastic
• Seeed XIAO ESP32-S3 (8 MB flash)
• Heltec LoRa V3.2/T114
• ATGM336H GPS
• Micro-SD Storage
• DS3231 RTC
• SW-420 tamper sensor
• KSD9700 thermal switch + fan
• 82 mm 2-layer PCB: copper ground plane, mounting holes, digital & physical passthrough, SMD breakout pads
• Power: 5V USB, battery pack, or included 2S 18650 UPS; accepts 5V solar or standard USB power (Solar panels not included).

• AGPL-3.0 & MIT open-source, browser flasher, CLI, PlatformIO

  ---

Resources

• Getting Started: DIGI Node PCB
• Assembly Manual (PDF)
• PCB welcome letter
• Parts Links & Images
• Privacy Policy

Open Source, Easy Updates

• Firmware
• Command Center C2
• Assembly manual + STLs in the repo hw/ folder

• Web flasher/configure tool for modifying your node settings and updating firmware.

  Notes

• Use grease on the housing seals and swap in straight antennas if in wet conditions
• Instructions for flashing the latest Meshtastic and AntiHunter firmware is in the welcome letter
• The vibration sensor has a hardware tunable pot for turbulent deployments

Built for lawful, authorized use only. Legal disclaimer.

IMPORTANT DELIVERY NOTE: Be sure to include your unit/apartment number if applicable. USPS returns packages if the address or name are not in their system.

No shipping to Alaska, Hawaii, Puerto Rico, or US territories. Orders to those destinations are cancelled and refunded.

- Dispatch is typically 1–3 business days when in stock.

- Ships within the contiguous 48 US states via USPS Ground Advantage or Priority Mail

- Every shipment includes a tracking number via USPS

- PCBs are bagged, sealed, and shipped in a bubble mailer. Orders of 6 or more ship boxed via USPS Priority Mail.

- Parts kits/assembled units are bagged, hex-paper padded and ship boxed. Assembled units ship in ESD bags.