🚀 Introducing ANAT — AI Network Anomaly Tracker
Source Reddit ThreatIntel
Discussion
ANAT (AI Network Anomaly Tracker) is an open-source, lightweight Intrusion Detection System (IDS) designed for real-time network traffic monitoring and anomaly detection. It captures packets, detects suspicious activities such as port scans, floods, and large packets, and visualizes alerts through a cyberpunk-themed dashboard. The tool supports alert logging, filtering, trusted source suppression, and integration with Discord for alert notifications. It is intended for educational and authorized security testing purposes only and requires elevated privileges for packet capture.
r/threatintel (opens in a new tab)u/HuckleberryLife4650 points0 comments
ANAT is an open-source network intrusion detection tool built with Python, featuring real-time traffic monitoring, suspicious activity detection, security alerts, and an interactive dashboard.
🔗 GitHub: https://github.com/securitygeek15/ANAT
Feedback and contributions are welcome!
Links cited in the discussion
Impact
No direct security vulnerability or exploit is described. ANAT is a defensive tool that enhances network visibility and anomaly detection capabilities. Its impact is positive in improving network security monitoring but does not represent a threat or vulnerability itself.
Defensive guidance
Not applicable as ANAT is a security monitoring tool, not a vulnerability or threat. Users should ensure they run ANAT only on networks they own or have explicit permission to monitor to comply with legal requirements. No patch or remediation is relevant.
Summary
ANAT is a Python-based IDS that uses Scapy for live packet capture and SQLite for alert storage. It detects network anomalies including port scans, suspicious port connections, packet floods, and oversized packets. Alerts are presented in a live dashboard with charts and leaderboards, and can be pushed to Discord channels. The system supports multi-interface monitoring, trusted IP suppression, and Docker deployment. It is designed for use by students, researchers, and homelab enthusiasts to gain visibility into network security posture. No vulnerabilities or exploits are described in the provided information.