@NFTCPS: You have no idea how many unknown devices are secretly using your WiFi. Pi.Alert is an open-source tool that does one thing: monitors your WiFi and LAN, tracking who connects, disconnects, or secretly changes IP. It uses three methods to scan the network: arp-scan direct sniffing …
Summary
Introducing the open-source tool Pi.Alert, used to monitor WiFi/LAN devices, detect unknown devices and changes, supports deployment on Raspberry Pi, and sends email notifications.
View Cached Full Text
Cached at: 07/15/26, 01:54 PM
You have no idea how many unknown devices are secretly leeching off your WiFi.
Pi.Alert is a lightweight open-source tool that does just one thing: it monitors your WiFi and local network, catching every device that connects, disconnects, or quietly changes its IP.
It scans the network using three methods:
arp-scanfor direct probing- Pi-hole integration to catch stragglers
- dnsmasq to check DHCP lease records
When an unknown device connects, or a device you’ve marked as “always connected” suddenly goes offline, Pi.Alert sends you an email alert. You can run it on a Raspberry Pi with a single command.
Better to have some visibility into your home network security than to stay in the dark.
https://github.com/pucherot/Pi.Alert…
pucherot/Pi.Alert
Source: https://github.com/pucherot/Pi.Alert
Pi.Alert
WIFI / LAN intruder detector.
Scan the devices connected to your WIFI / LAN and alert you the connection of unknown devices. It also warns the disconnection of “always connected” devices.

(Apologies for my English and my limited knowledge of Python, php and JavaScript)
How it works
The system continuously scans the network for:
- New devices
- New connections (re-connections)
- Disconnections
- “Always Connected” devices down
- Devices IP changes
- Internet IP address changes
Scan Methods
Up to three scanning methods are used:
- Method 1: arp-scan. The arp-scan system utility is used to search for devices on the network using arp frames.
- Method 2: Pi-hole. This method is optional and complementary to method 1. If the Pi-hole DNS server is active, Pi.Alert examines its activity looking for active devices using DNS that have not been detected by method 1.
- Method 3. dnsmasq. This method is optional and complementary to the previous methods. If the DHCP server dnsmasq is active, Pi.Alert examines the DHCP leases (addresses assigned) to find active devices that were not discovered by the other methods.
Components
The system consists of two parts:
Back
In charge of:
- Scan the network searching connected devices using the scanning methods described
- Store the information in the DB
- Report the changes detected by e-mail
![]() | ![]() |
|---|
Front
A web frontal that allows:
- Manage the devices inventory and the characteristics
- Display in a visual way all the information collected by the back
- Sessions
- Connected devices
- Favorites
- Events
- Presence
- Concurrent devices
- Down alerts
- IP’s
- …
![]() | ![]() |
|---|---|
![]() | ![]() |
Installation
Initially designed to run on a Raspberry Pi, probably it can run on many other Linux distributions.
-
One-step Automated Install:
curl -sSL https://github.com/pucherot/Pi.Alert/raw/main/install/pialert_install.sh | bash
Update
- One-step Automated Update:
curl -sSL https://github.com/pucherot/Pi.Alert/raw/main/install/pialert_update.sh | bash
Uninstall process
Device Management
Other useful info
Versions History
Powered by:
| Product | Objetive |
|---|---|
| Python | Programming language for the Back |
| PHP | Programming language for the Front-end |
| JavaScript | Programming language for the Front-end |
| Bootstrap | Front-end framework |
| Admin.LTE | Bootstrap template |
| FullCalendar | Calendar component |
| Sqlite | DB engine |
| Lighttpd | Webserver |
| arp-scan | Scan network using arp commands |
| Pi.hole | DNS Server with Ad-block |
| dnsmasq | DHCP Server |
License
GPL 3.0 Read more here
Contact
Suggestions and comments are welcome
Niao Ge | Blue Bird Society 🕊️ (@NFTCPS): For the first time, Coinbase, the largest US exchange, supports user registration from mainland China without requiring proof of address. The Base chain meme coin $Base Life suddenly pumped, hitting a peak market cap of $530,000 before pulling back to $130,000 this morning!
Chart: https://t.co/AISJJZuIqS (Not financial advice)
Similar Articles
@shenxiankk: Here's a pretty creepy thing: That WiFi router at home? It's probably not as secure as you think. There's this open-sou…
介绍开源工具 Airgorah——一个用 Rust 编写、基于 Linux 的图形化 aircrack-ng 封装工具,可用于嗅探 WiFi 流量、识别设备、发起 deauth 攻击并抓取握手包破解密码,仅限在自己的网络上进行安全审计使用。
ARP! Tell your network to explain itself
一篇面向初学者的博客,介绍地址解析协议(ARP)如何把 IP 地址映射到 MAC 地址,并演示 arp-scan、Wireshark 和 ip neighbour 等工具的使用,顺带提及 ARP 欺骗与广播风暴等安全话题。
@VincentLogic: Discovered a powerful network monitoring tool for the terminal! With RustNet, you can monitor all network connections in real-time directly from the terminal. See at a glance which processes are secretly transmitting data and who is connecting to your server. The best part is seeing the application associated with each connection—something Wireshark can't do. You can view this directly over SSH without needing X11 forwarding…
Introduces RustNet, a terminal-based network monitoring tool developed in Rust. It supports real-time connection monitoring, process association, and traffic analysis, making it ideal for operations and security troubleshooting.
@grgerwcwetwet: Why has my home network suddenly become slow? Often it's not the broadband issue; rather, you have no idea who is secretly hogging the bandwidth. Recently, I discovered an open-source project on GitHub called Neko Master that visualizes home gateway traffic in real-time, giving you a clear picture of what's happening on your network. GitHub: https:/…
Neko Master is an open-source project that visualizes home gateway traffic in real-time, helping users identify who is secretly using the bandwidth.
@CycleDecoded: Many folks on X who are into price-drop monitoring, ticket grabbing, and deal hunting have been quietly using this tool. This killer GitHub project with 32.6k stars http://changedetection.io is basically a "global webpage watch plugin". Whether it's a price cut, stock replenishment, a silent webpage patch, ...
Introducing changedetection.io, an open-source webpage change monitoring tool that supports AI summaries, visual selection of monitored areas, multiple notification channels, and Docker private deployment.





