Windows Failed Login Telegram Alert

Monitor failed login attempts (Event ID 4625) and receive alerts via Telegram.

Features

• Detect failed logins
• Show username, IP, reason, protocol
• Tehran timezone support
• Duplicate alert prevention
• Emoji-enhanced messages

Setup

1. Create a Telegram bot
2. Set environment variables
3. Run script manually or via Task Scheduler

Supported Logon Types

• RDP
• Network
• Local
• Service