Skip to content
Notis

Add country context to an IP risk audit

Give reviewers geographic context for an IP without a separate research step.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Country by IP Address API

Tool to geolocate an ip address and retrieve country details and demographics. use when you need country-level data after obtaining the target ip address.

Why this helps

Risk analysts waste time opening another tool just to identify an IP country.

  • Adds country context quickly
  • Supports regional review queues
  • Keeps evidence in one report

Setup

Build it in a few focused steps.

  • 1Connect 21risk and Big data cloud once in the Notis portal.
  • 2Create an automation named IP country enrichment.
  • 3Tell Notis to geolocate each supplied IP and summarize the country details for the audit.
  • 4Pick a webhook trigger and choose where reports should go.
  • 5Test with one audit IP.

Questions about this workflow

Does this provide an exact address?

No. This action is for country level details and demographics.

What starts it?

A webhook containing an IP address starts the workflow.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link 21risk to Big data cloud. A trigger fires from one place; an action lands in another.

21risk triggers

Big data cloud actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Am I Roaming API

Tool to determine if the user is roaming based on their ip address and gps coordinates. use after obtaining device location to verify roaming status before mobile actions.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

ASN Extended Receiving From Info API

Tool to return upstream providers (receivingfrom) for a given asn. use when you need a paginated list of ases feeding traffic for the specified asn.

ActionInstant

ASN Extended Transit To Info API

Tool to return downstream customers (transitto) for a given asn. use when you need a paginated list of ases receiving traffic from a specific asn.

ActionInstant

ASN Rank List API

Tool to fetch a ranked list of autonomous systems by ipv4 announcement volumes. use after you need to compare or analyze as ranks.

ActionInstant

BGP Active Prefixes API

Tool to retrieve ipv4 or ipv6 prefixes currently announced on bgp. use when inspecting bgp routing announcements for a given asn.

ActionInstant

Reverse Geocoding With Timezone API

Tool to return reverse geocoding and time zone info for given coordinates. use when you need both locality details and timezone data in one call.

ActionInstant

Country by IP Address API

Tool to geolocate an ip address and retrieve country details and demographics. use when you need country-level data after obtaining the target ip address.

ActionInstant

Country Info API

Tool to fetch detailed country information by iso code. use when you need localized names, currencies, regions, and other metadata for a country.

ActionInstant

Connect any two apps with Notis in the middle.

21risk and Big data cloud, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Big data cloud.