Add an IP-based risk assessment to email triage
Get a structured risk assessment for a supplied IP, then use it as one input in your review of a new message.
Trigger
New Email Received
Trigger for new emails in an AgentMail inbox
Action
User Risk API
Tool to return a risk assessment for a user based on ip signals for fraud prevention. use after initial ip checks to decide whether to bypass or require captcha challenges.
Why this helps
Pulling together risk context by hand makes it harder to keep a steady triage routine.
- Return a consistent user risk assessment for a supplied IP.
- Reduce context switching during message review.
- Keep the assessment and its source message together in the run report.
Setup
Build it in a few focused steps.
- 1Connect Agent mail and Big data cloud once in the Notis portal.
- 2Create an automation from any channel or in Automations, New Automation.
- 3Tell Notis to assess user risk for an IP included in each new email and report the result with the message context.
- 4Pick the New Email Received trigger and choose where run reports should go.
- 5Test with one real email example that includes an IP address.
Questions about this workflow
Does the email trigger provide an IP address in every message?
Not necessarily. This action requires an IP input, so the prompt should have Notis report missing IP data instead of guessing.
Can I use the result as the only fraud decision?
Treat the assessment as a risk signal for review. It does not replace your own decision criteria or other checks.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Agent mail to Big data cloud. A trigger fires from one place; an action lands in another.
Agent mail triggers
Big data cloud actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Am I Roaming API
Tool to determine if the user is roaming based on their ip address and gps coordinates. use after obtaining device location to verify roaming status before mobile actions.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
ASN Extended Receiving From Info API
Tool to return upstream providers (receivingfrom) for a given asn. use when you need a paginated list of ases feeding traffic for the specified asn.
New Email Received
Trigger for new emails in an AgentMail inbox
ASN Extended Transit To Info API
Tool to return downstream customers (transitto) for a given asn. use when you need a paginated list of ases receiving traffic from a specific asn.
ASN Rank List API
Tool to fetch a ranked list of autonomous systems by ipv4 announcement volumes. use after you need to compare or analyze as ranks.
BGP Active Prefixes API
Tool to retrieve ipv4 or ipv6 prefixes currently announced on bgp. use when inspecting bgp routing announcements for a given asn.
Reverse Geocoding With Timezone API
Tool to return reverse geocoding and time zone info for given coordinates. use when you need both locality details and timezone data in one call.
Country by IP Address API
Tool to geolocate an ip address and retrieve country details and demographics. use when you need country-level data after obtaining the target ip address.
Country Info API
Tool to fetch detailed country information by iso code. use when you need localized names, currencies, regions, and other metadata for a country.
Connect any two apps with Notis in the middle.
Agent mail and Big data cloud, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Big data cloud.