Enrich IP addresses with country attribution using IPinfo and Slack alerts
Template Description IP Enrichment & Country Attribution is a lightweight cybersecurity automation that enriches IP addresses with geographic and network intelligence. It validates incoming IPs, filters out private or invalid addresses, and enriches public IPs using an open-source IP enrichment service. 🔄 How It Works 1. Receives an IP address via webhook (API or Slack). 2. Validates the IP format and rejects invalid input. 3. Checks for private or internal IP ranges. 4. Ignores private IPs wit
At a glance
Enrich IP addresses with country attribution using IPinfo and Slack alerts is a ready-made n8n workflow you import as a workflow JSON file — no build required. It connects Slack. It's free to download. Follow the 5-step import below to go live in minutes.
- Platform
- n8n
- Connects
- Slack
- Modules
- 11
- Price
- Free
- Version
- v1.0

About this workflow
Template Description IP Enrichment & Country Attribution is a lightweight cybersecurity automation that enriches IP addresses with geographic and network intelligence. It validates incoming IPs, filters out private or invalid addresses, and enriches public IPs using an open-source IP enrichment service. 🔄 How It Works 1. Receives an IP address via webhook (API or Slack). 2. Validates the IP format and rejects invalid input. 3. Checks for private or internal IP ranges. 4. Ignores private IPs with a clear response. 5. Enriches public IPs using an open-source IP intelligence service. 6. Normalizes country, ISP, and ASN data and applies a severity label. 7. Slack notifications are sent for enriched public IPs. 8. Returns a structured JSON response. ⚙️ Setup Steps 1. Import & Activate Workflow - Import the JSON template into n8n - Actvate the workflow 2. Set Up Webhook - Copy the webhook URL - Send a POST request with the IP in the body, e.g.: { "text" : "8.8.8.8" } - Using curl: curl -X POST \ -H "Content-Type: application/json" \ -d '{"text":"8.8.8.8"}' 3. Configure Slack (Slack Alert) - Create or select Slack credentials in n8n - Make sure the bot is in your target channel - Update the Slack node with correct channel. 4. Slack Slash Command Setup (Optional) - Enable Slash Commands and create new command (for example /ip-enrich). - Set the Request URL to your n8n webhook endpoint. - Choose POST as the request method. - Install the app to your workspace. Usage example: /ip-enrich 8.8.8.8 🎛️ Customization Options - Enrichment source: Replace or extend the IP intelligence API with additional providers (for example reputation or abuse scoring). - Slack formatting: Customize the Slack message text, emojis, or use threads for better alert grouping. - Input sources: Reuse the webhook for other integrations such as SIEM alerts or security tools.
How to import this n8n workflow
- 1
Download the workflow JSON file after purchase.
- 2
Open n8n → click the menu → Import from File.
- 3
Select the downloaded JSON and import.
- 4
Set up credentials for each node that requires them.
- 5
Click Execute Workflow to test, then activate.
Setup guide
Setup guide included
Purchase to unlock the full step-by-step guide
Related N8n workflows
Schedule appointments with manual approval using Google Calendar and Gmail
AI-Powered Employee Database Management via Telegram using OpenAI and Airtable
Automate Google Analytics data sharing to Google Sheets and Slack
Get Slack messages for new Adalo records
Automate Glassdoor job search with Bright Data scraping & Google Sheets storage
Query Databricks data and SQL insights via Slack with Gemini AI agent
Automated music video creation & YouTube publishing with AI-generated metadata from Google Drive
Load and aggregate files from a Google Drive folder into a key-value dictionary
Reviews
No reviews yet
Be the first to buy and share your experience.
Leave a review
Sign in to share your experience with this workflow.
Create a free account to purchase workflows.
- JSON blueprint — instant download
- Setup guide PDF included
- 5 downloads · valid 30 days
- Works with n8n
Need help setting this up?
Book a 3-hour live setup session with an Agility consultant.
- Configure live on Google Meet / Zoom
- Free follow-up if workflow has defects
- Platform expert assigned to you