I built NetGuard: A Hybrid Network IDS/IPS Telegram Bot using Python & Scapy
🛡️ NetGuard: A Hybrid Network IDS/IPS Telegram Bot (Built with Python & Scapy)
I'm excited to share my very first fully deployed open-source project: NetGuard!
🎓 Background & Purpose
This project originally started as the foundation of my university graduation project. Recognizing its potential for real-world application, I decided to refactor, upgrade, and release it to the community.
Whether you are a student in Cybersecurity / Computer Networks looking for a solid base to learn from and modify, or an enthusiast who needs a lightweight, ready-to-use monitoring tool, this repository is designed for you! Feel free to fork it, adapt it for your own research, or use it as-is.
⚡ What is NetGuard?
NetGuard is a Headless, Threaded Python-based Network Intrusion Detection & Prevention System (IDS/IPS) integrated with an interactive Telegram Command Center and n8n Workflow automation capabilities.
🌟 Key Features:
• 🔍 Auto Gateway Detection: Automatically binds to your active network adapter and local subnet.
• 📱 Subnet Scanner: Scans connected devices using ARP requests.
• 🌐 DNS Traffic Monitoring (IDS): Sniffs UDP 53 packets in real-time to log active domains and flag suspicious traffic.
• ⛔ Targeted ARP Isolation (IPS): Block or isolate unauthorized devices dynamically using inline Telegram buttons.
• 🤖 Remote Telegram Interface: Get immediate alert notifications on your phone and run management commands on the fly.
• 🔄 n8n Integration Ready: Built to trigger custom webhooks and automate security workflows seamlessly.
⚠️ Important Usage Notes:
• 🔐 Administrator Privileges Required: Because NetGuard interacts directly with network sockets via Scapy (for packet sniffing and ARP frame manipulation), you must run the script with Administrator / Elevated privileges:
python IDS-IPS.py
• 🏠 Local Network Scope (LAN Only): NetGuard relies on Layer-2 ARP mechanisms for discovery and isolation. It is designed specifically for Home, Small Office, or Single-Subnet (SOHO) local networks, rather than complex enterprise-routed environments.
💻 Tech Stack
• Language: Python 3.x
• Core Libraries: Scapy, pyTelegramBotAPI, Requests
• Integrations: Telegram Bot API, n8n Automation Ready
🔗 Source Code & Contribution
The repository is completely open-source. I’d love to hear your feedback, suggestions, or bug reports!
👉 GitHub Repository: https://github.com/Hasan-devolp/Netguard-IDS-IPS
(If you find this project helpful for your studies or work, leaving a ⭐️ on GitHub would be greatly appreciated!)
#Python #Cybersecurity #NetworkSecurity #OpenSource #GitHub #TelegramBot #PythonProgramming #InfoSec #NetworkEngineering #NetGuard #IDS #IPS #EthicalHacking #n8n #Automation #Coding #SoftwareEngineering #TechProjects