Skip to content
Notis

Review IP threat signals from reports

Pull IP addresses from security documents and gather their available hazard signals for review.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Hazard Report API

Retrieves a cybersecurity risk report for an IP address.

Why this helps

Investigating IPs one by one across security reports creates extra context switching and can delay triage.

  • Retrieve hazard information for IPs found in reports.
  • Bring IP risk signals into the document review workflow.
  • Reduce repetitive manual lookups during triage.

Setup

Build it in a few focused steps.

  • 1Connect Affinda and Big data cloud once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or tell Notis what you want from any channel.
  • 3Describe the outcome: extract IP addresses from each submitted security report and retrieve a cybersecurity hazard report for each address.
  • 4Pick the webhook trigger and choose where run reports go.
  • 5Test with one real security report containing an IP address.

Questions about this workflow

What kinds of signals can the hazard report include?

The action is intended to assess signals such as VPN, proxy, blacklist, and hosting risk for a specified IP.

Does the workflow decide whether to block an IP?

It retrieves hazard information. A blocking decision or policy must be supplied by you.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Affinda to Big data cloud. A trigger fires from one place; an action lands in another.

Affinda triggers

Big data cloud actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Am I Roaming API

Determines whether you are roaming based on your location.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

ASN Extended Receiving From Info API

Lists upstream providers that send traffic to an autonomous system.

ActionInstant

ASN Extended Transit To Info API

Lists downstream customers receiving traffic from an autonomous system.

ActionInstant

ASN Rank List API

Lists autonomous systems ranked by announced IPv4 address volume.

ActionInstant

BGP Active Prefixes API

Retrieves IPv4 or IPv6 prefixes currently announced through BGP.

ActionInstant

Reverse Geocoding With Timezone API

Retrieves place names and time zone information for coordinates.

ActionInstant

Country by IP Address API

Identifies the country associated with an IP address.

ActionInstant

Country Info API

Retrieves detailed information about a country.

ActionInstant

Connect any two apps with Notis in the middle.

Affinda and Big data cloud, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Big data cloud.