rather the netscaler console now...

You can look in the security section, but I am going to initially say no. You would have to detail what IP addresses you consider outside and set a rule based on those, which I think would be very difficult to set. Unless you used the Geo WAF capability to log any connections, then you could trigger on the log event.

Basically anything outside the US

I do not know of a way. Sorry.

Have you ever done something like this? https://docs.netscaler.com/en-us/citrix-adc/current-release/load-balancing/load-balanc[…]ion-details-using-ip-address-from-geolocation-database.html

Yes, but for GSLB or Optimal Gateway Routing etc. It is not as accurate as most people would prefer.

will give it a shot

Let me know if you can get it to work.

Send logs to a SIEM system and do the alerting there.

This worked in splunk