Enrich IP addresses with country attribution using IPinfo and Slack alerts
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This workflow has 11 nodes and runs when an HTTP POST request hits its webhook URL. Along the way it connects Slack.
How it runs
Trigger: When an HTTP POST request hits its webhook URL.
- Validate IP Address (Code): runs custom JavaScript code
- If: checks a condition and branches into true / false
- Check Private / Internal IP (Code): runs custom JavaScript code
- Respond Invalid IP Address (Respond to Webhook): sends the response back to the webhook caller
- If: checks a condition and branches into true / false
- Respond Private IP Ignored (Respond to Webhook): sends the response back to the webhook caller
- Enrich IP (Geo & ASN Lookup) (HTTP Request): calls an HTTP API
- Normalize Enrichment (Code): runs custom JavaScript code
- Slack: uses Slack
- Respond IP Enrichment Result (Respond to Webhook): sends the response back to the webhook caller
Services it uses
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (6)
- Webhook
n8n-nodes-base.webhook - Code
n8n-nodes-base.code - If
n8n-nodes-base.if - Respond to Webhook
n8n-nodes-base.respondToWebhook - HTTP Request
n8n-nodes-base.httpRequest - Slack
n8n-nodes-base.slack
From the author
🧩 Template Description IP Enrichment & Country Attribution is a lightweight cybersecurity automation that enriches IP addresses with geographic and network intelligence. It validates incoming IPs, filters out private or invalid addresses, and enriches public…