Skip to content
Notis

Explore indicators connected to a shipping IP

Give an IP review a useful next step by retrieving related objects from VirusTotal.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Get IP Address Relationships

Tool to retrieve objects related to a specific ip address by relationship type. use when you have an ip and need to explore connected files, urls, or other entities.

Why this helps

An IP lookup can leave you unsure what to investigate next, adding friction to an already interrupted task.

  • Retrieve objects related to a supplied IP by relationship type.
  • Support a more focused follow-up from an IP report.
  • Avoid manually restarting the investigation with separate searches.

Setup

Build it in a few focused steps.

  • 1Connect Shippo and VirusTotal to Notis once in the portal.
  • 2Create an automation or ask Notis to retrieve related objects when a connected process sends a shipping-related IP.
  • 3Select a Notis webhook trigger and choose the run-report channel.
  • 4Test with one IP address that needs follow-up.

Questions about this workflow

Is this a replacement for an IP report?

No. It returns related objects for an IP. Use the IP report action for reputation and analysis details.

Will this automatically block the related objects?

No. It retrieves information only; any response decision remains with your security process.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Shippo to Virustotal. A trigger fires from one place; an action lands in another.

Shippo triggers

Virustotal actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Add VirusTotal Comment

Tool to add a comment to a virustotal resource (file, url, domain, or ip address). use after analyzing a resource to leave contextual feedback. provide exactly one identifier per call.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add Vote

Tool to add a vote (harmless/malicious) to a virustotal resource. use after reviewing analysis results to submit your verdict.

ActionInstant

Get Analysis Report

Tool to retrieve the analysis report of a file or url submission. use after obtaining an analysis id to fetch its detailed report.

ActionInstant

Get comments

Tool to retrieve the latest comments on a virustotal resource. use when you need to review user-generated comments for a file, url, domain, or ip after obtaining its identifier.

ActionInstant

Get Domain Relationships

Tool to retrieve relationship objects for a given domain. use when you have a domain and need to explore its related entities.

ActionInstant

Get Domain Report

Tool to retrieve the analysis report of a domain. use when you need detailed insight on a domain's reputation and analysis stats.

ActionInstant

Get File Report

Tool to retrieve the analysis report of a file. use when you have a file's hash and need detailed scan metadata.

ActionInstant

Get IP Address Relationships

Tool to retrieve objects related to a specific ip address by relationship type. use when you have an ip and need to explore connected files, urls, or other entities.

ActionInstant

Connect any two apps with Notis in the middle.

Shippo and Virustotal, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Virustotal.