Hello,
does LoginNotify notify on API logins as well? I recently got an email saying a login from a new device was detected, and since I didn't recall logging in (via a webinterface), I looked into Logstash https://logstash.wikimedia.org to actually see what was that, and it turned out it was an API login request through Huggle.
Also, maybe we should add something about the login? Like, city from GeoIP cookie (whole IP address as suggested in T174388 might be confusing)? Device used to log in?
What do you all think?
Martin
wikitech-l@lists.wikimedia.org