URL & IP Threat Intelligence with GreyNoise & VirusTotal - n8n Workflow | Neura Market | Neura Market
URL & IP Threat Intelligence with GreyNoise & VirusTotal
Automates cybersecurity lookups for URLs/IPs using GreyNoise RIOT/Context and VirusTotal, resolving DNS if needed, merging results, and notifying via email/Slack.
This n8n workflow is a robust threat intelligence tool that processes user-submitted URLs or IPs via form or webhook. It intelligently detects input type: for IPs, it proceeds directly; for URLs, it performs a DNS lookup via Google Public DNS to extract the IP. This ensures comprehensive analysis regardless of input format.
The workflow then queries GreyNoise in parallel—RIOT IP Lookup for reputation and benign activity classification, and IP Context for threat details like location, tags, cate