21 lines (17 loc) · 442 Bytes

Windows Failed Login Telegram Alert

Monitor failed login attempts (Event ID 4625) and receive alerts via Telegram.

Features

Detect failed logins
Show username, IP, reason, protocol
Tehran timezone support
Duplicate alert prevention
Emoji-enhanced messages

Setup

Create a Telegram bot
Set environment variables
Run script manually or via Task Scheduler

Supported Logon Types

RDP
Network
Local
Service