Skip to content
Notis

Triage suspicious IPs with company context

Know who may be behind a suspicious IP before deciding how to respond.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

IP to Company Lookup

Tool to lookup company by ip address. use after obtaining an ip to get detailed company info.

Why this helps

Risk teams can waste time researching IP ownership manually during urgent reviews.

  • Shortens first response time
  • Adds a concrete investigation lead
  • Standardizes triage reports

Setup

Build it in a few focused steps.

  • 1Connect both apps in Notis.
  • 2Create a suspicious IP triage automation.
  • 3Tell Notis to run the IP to company lookup from each risk webhook and summarize the result with the related risk details.
  • 4Choose notis_webhook and connect the risk event endpoint.
  • 5Select a report channel and test with one suspicious IP.

Questions about this workflow

Can Notis decide whether the IP is malicious?

No. It can provide company context and a summary, while your team makes the risk decision.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link 21risk to Bigpicture io. A trigger fires from one place; an action lands in another.

21risk triggers

Bigpicture io actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Company Find

Tool to lookup company data by domain name. use when you need detailed company profile by providing a website domain. use after confirming domain correctness.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

IP to Company Lookup

Tool to lookup company by ip address. use after obtaining an ip to get detailed company info.

ActionInstant

Name to Domain Search

Tool to find company domain(s) by company name. use when you have a company name and need up to 3 likely domains.

ActionInstant

Connect any two apps with Notis in the middle.

21risk and Bigpicture io, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Bigpicture io.