Skip to content
Notis

Resolve IP timezone for incident timelines

Make event timestamps easier to compare by adding the IP timezone and local time.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Time Zone by IP Address API

Tool to retrieve time zone information for a given ip address. use when you need dst status, utc offsets, and local/utc time for a specific ip.

Why this helps

Incident timelines become confusing when reviewers compare timestamps across regions.

  • Improves timeline clarity
  • Adds UTC offset context
  • Reduces manual timezone research

Setup

Build it in a few focused steps.

  • 1Connect 21risk and Big data cloud once in the Notis portal.
  • 2Create an automation named Incident timezone resolver.
  • 3Describe that Notis should look up timezone data for each supplied IP and summarize local time context.
  • 4Pick a webhook trigger and choose the report destination.
  • 5Test with one IP from an incident record.

Questions about this workflow

What timezone details are returned?

The action returns timezone information, daylight saving status, offsets, and local or UTC time.

Can it rewrite timestamps?

It supplies context for your team; your incident system must perform any timestamp update.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link 21risk to Big data cloud. A trigger fires from one place; an action lands in another.

21risk triggers

Big data cloud actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Am I Roaming API

Tool to determine if the user is roaming based on their ip address and gps coordinates. use after obtaining device location to verify roaming status before mobile actions.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

ASN Extended Receiving From Info API

Tool to return upstream providers (receivingfrom) for a given asn. use when you need a paginated list of ases feeding traffic for the specified asn.

ActionInstant

ASN Extended Transit To Info API

Tool to return downstream customers (transitto) for a given asn. use when you need a paginated list of ases receiving traffic from a specific asn.

ActionInstant

ASN Rank List API

Tool to fetch a ranked list of autonomous systems by ipv4 announcement volumes. use after you need to compare or analyze as ranks.

ActionInstant

BGP Active Prefixes API

Tool to retrieve ipv4 or ipv6 prefixes currently announced on bgp. use when inspecting bgp routing announcements for a given asn.

ActionInstant

Reverse Geocoding With Timezone API

Tool to return reverse geocoding and time zone info for given coordinates. use when you need both locality details and timezone data in one call.

ActionInstant

Country by IP Address API

Tool to geolocate an ip address and retrieve country details and demographics. use when you need country-level data after obtaining the target ip address.

ActionInstant

Country Info API

Tool to fetch detailed country information by iso code. use when you need localized names, currencies, regions, and other metadata for a country.

ActionInstant

Connect any two apps with Notis in the middle.

21risk and Big data cloud, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Big data cloud.