AcademyWorkflowsOperations

Suspicious Login Detection

Security and IT operations teams that want a first triage of login alerts with priority levels.

Use it nowWant it running at your company?
  • Recommendedour rating
  • 6,442views on n8n

Use it now

Open inClaudeChatGPTGeminiPerplexity
Open on n8n.io ↗

Paste it straight onto an n8n canvas with Ctrl+V or Cmd+V.

Third party software. By copying, downloading or installing it you accept the Academy legal notice: you are responsible for reviewing its code and permissions before use.

suspicious-login-detection.json

Loading the file...

What it does

An n8n workflow for reviewing suspicious login events. It runs from a webhook when a login is recorded, or by hand for testing. It checks the IP address with GreyNoise and its location with IP-API, looks up the IP and user agent with Userparser, assigns a High, Medium or Low priority and sends a Slack alert.

Use cases

  1. 01Triaging login alerts by IP reputation
  2. 02Sending login alerts with their priority to Slack
  3. 03Checking the location of an unusual sign-in

Connects

HTTP Request · Postgres · Slack · Gmail · Code · HTML

Questions about
Suspicious Login Detection.

What is Suspicious Login Detection used for?

Security and IT operations teams that want a first triage of login alerts with priority levels. An n8n workflow for reviewing suspicious login events. It runs from a webhook when a login is recorded, or by hand for testing. It checks the IP address with GreyNoise and its location with IP-API, looks up the IP and user agent with Userparser, assigns a High, Medium or Low priority and sends a Slack alert.

How do I import Suspicious Login Detection into n8n?

Copy the workflow JSON from this page and paste it onto the n8n canvas with Ctrl+V or Cmd+V. Then connect your credentials in each node.

Is Suspicious Login Detection safe to use?

It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.

Related resources

Read the guide: AI workflow automation ↗

  1. 001Word Documents (docx)Operations, legal and admin teams who produce or review Word files such as contracts, reports and templates.OfficialSkill
  2. 002Internal CommsOperations and people teams who write regular updates, newsletters and reports for colleagues.OfficialSkill
  3. 003PDFOperations and admin teams that handle PDF documents and need to extract, combine or fill them in.OfficialSkill
  4. 004Very quick quickstart (n8n)Operations teams and anyone new to n8n who wants a hands-on introduction before building real automations.RecommendedWorkflow · 232k views
  5. 005Extract text from a PDF fileOperations teams that need the text from PDF files inside an automated flow.RecommendedWorkflow · 96k views
  6. 006RAG chatbot for company documents (Google Drive and Gemini)Operations and internal teams that want staff to get answers from shared company documents.RecommendedWorkflow · 95k views