# Guard Hostinger VPS CPU spikes with Anthropic and SSH: n8n workflow

> Started by a clock, and works across Email. 39 steps, 5 branches, 1 loop or waits: large, and worth reading before you trust it with anything live.

Source: https://millionrounds.com/workflow/guard-hostinger-vps-cpu-spikes-with-anthropic-and-ssh (Millionrounds; every figure on the page links to its filing or article)

[Automation library](https://millionrounds.com/workflows) · [Integrations](https://millionrounds.com/workflows?category=Integrations#library)

# Guard Hostinger VPS CPU spikes with Anthropic and SSH

Started by a clock, and works across Email. 39 steps, 5 branches, 1 loop or waits: large, and worth reading before you trust it with anything live.

Large

[Download free](https://millionrounds.com/login?next=%2Fapp%2Fworkflow%2Fguard-hostinger-vps-cpu-spikes-with-anthropic-and-ssh)

**39 steps** Large: read it before trusting it with anything live

**5** Branches: places the flow splits

**1** Loop or waits

**1** Service it connects to

## The flow

Starts it 1 Model 1 Logic 21 Service 16

The steps in the order they run, from what starts it.

- 1 **IMAP Trigger: New Reply** Email Read Imap *Service*
- 2 **Schedule: Every 15 Min** Schedule trigger *Starts it*
- 3 **Extract Case ID & Decision** Code *Logic*
- 4 **Config: Detection Settings** Set *Logic*
- 5 **Case ID Found & Approved?** If *Logic*
- 6 **Get VPS Metrics** Hostinger Api *Service*
- 7 **Config (Kill Listener)** Set *Logic*
- 8 **No Action (Not Approved)** No Op *Logic*
- 9 **Analyze Metrics** Code *Logic*
- 10 **SSH: Read Case log** Ssh *Service*
- 11 **CPU Spike?** If *Logic*
- 12 **Parse Case** Code *Logic*
- 13 **Get CPU Process List** Ssh *Service*
- 14 **No Action: Below Threshold** No Op *Logic*
- 15 **Found & Pending?** If *Logic*
- 16 **Format Process List** Code *Logic*
- 17 **Create Snapshot** Hostinger Api *Service*
- 18 **Email: Case Not Found** Email Send *Service*
- 19 **Analyze CPU Spike with AI** Anthropic *Model*
- 20 **Wait (snapshot buffer)** Wait *Logic*
- 21 **Parse AI Analysis** Code *Logic*
- 22 **Build Kill Command** Code *Logic*
- 23 **Traffic-Driven?** If *Logic*
- 24 **SSH: Kill flagged processes** Ssh *Service*
- 25 **List Firewalls** Hostinger Api *Service*
- 26 **Build Log Entry** Code *Logic*
- 27 **Build Kill Log Entry** Code *Logic*
- 28 **Find Lockdown Firewall** Code *Logic*
- 29 **Log CPU use** Ssh *Service*
- 30 **SSH: Log case (killed)** Ssh *Service*
- 31 **Lockdown Firewall Exists?** If *Logic*
- 32 **Alert: Non-Traffic CPU Spike** Email Send *Service*
- 33 **Email: Killed Confirmation** Email Send *Service*
- 34 **Activate Lockdown Firewall** Hostinger Api *Service*
- 35 **Create Lockdown Firewall** Hostinger Api *Service*
- 36 **Alert: Lockdown Activated** Email Send *Service*
- 37 **Split Allowed Ports** Code *Logic*
- 38 **Create Firewall Rule** Hostinger Api *Service*
- 39 **Finalize Lockdown Firewall** Code *Logic*

## How it's built

- **Starts on:** A clock
- **Steps:** 39, with 5 branches, 1 loop or waits
- **Size:** Large: read it before trusting it with anything live
- **Connects to:** Email
- **Model:** None. This is plumbing, not judgement

## Questions

What does it need to run?

An n8n account, plus your own Email account. You connect your own accounts after importing it; none are included.

What starts it?

It starts on a clock.

Does it use AI?

No. Every step is fixed logic or a call to a service, so it does the same thing every time.

How long does it take to set up?

Take your time. At 39 steps it is large: read it before trusting it with anything live.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

**Before you run it**

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 39 steps before you point it at anything that matters.

## Run it in n8n

- **Create your n8n account** Free to start. n8n is where the workflow runs. [Create an n8n account ↗](https://millionrounds.com/n8n)
- **Download the workflow** Free with a Millionrounds account. [Download free](https://millionrounds.com/login?next=%2Fapp%2Fworkflow%2Fguard-hostinger-vps-cpu-spikes-with-anthropic-and-ssh)
- **Paste it into n8n** Open a new workflow in n8n and paste. Then connect your own accounts.

Stored with the author's traces removed: canvas notes, instance identifiers, saved credential names and any live document they had left behind.

## Connects to

Each opens the other workflows that use it.

[Email](https://millionrounds.com/workflows?service=Email#library)

## Workflows like it

Also integrations, with the same services where possible, closest in size first.

- [**Synthesize and compare multiple LLM responses with OpenRouter** 20 steps · Email](https://millionrounds.com/workflow/synthesize-and-compare-multiple-llm-responses-with-openroute)
- [**Flag unbilled time and revenue in Clio and send email digests** 18 steps · Email](https://millionrounds.com/workflow/flag-unbilled-time-and-revenue-in-clio-and-send-email-digest)
- [**Cash reimbursement** 16 steps · Email](https://millionrounds.com/workflow/cash-reimbursement)
- [**Docker registry cleanup workflow** 16 steps · Email](https://millionrounds.com/workflow/docker-registry-cleanup-workflow)
- [**Draft and route Google reviews replies with Google Places** 16 steps · Email](https://millionrounds.com/workflow/draft-and-route-google-reviews-replies-with-google-places)
- [**Analyze emails** 15 steps · Email](https://millionrounds.com/workflow/analyze-emails)