Review an IP hazard report from Slack
Bring threat signals into the thread where your team is already coordinating a response.
Trigger
Channel Message Received
Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.
Action
Hazard Report API
Tool to fetch a cybersecurity hazard report for a specified ip address. use when assessing an ip's threat profile (vpn, proxy, blacklists, hosting risk).
Why this helps
Security triage slows down when someone has to copy an IP into a separate lookup service and bring findings back.
- Surface VPN, proxy, blacklist, and hosting risk signals for review.
- Keep investigation context beside the original Slack message.
- Reduce lookup and copy-back work during triage.
Setup
Build it in a few focused steps.
- 1Connect Slack and Big data cloud to Notis once through the portal.
- 2Create an automation in the portal, or tell Notis conversationally to fetch hazard reports for IPs posted in a Slack channel.
- 3Write one instruction to summarize relevant signals and link the response to the discussion.
- 4Select the Slack channel message trigger and choose a run report channel.
- 5Test with an approved example IP address.
Questions about this workflow
What signals does this report cover?
The Hazard Report API assesses an IP's threat profile, including VPN, proxy, blacklist, and hosting risk.
Does the workflow block traffic?
No. The action retrieves a report; it does not block or change network traffic.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Slack to Big data cloud. A trigger fires from one place; an action lands in another.
Slack triggers
Big data cloud actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Am I Roaming API
Tool to determine if the user is roaming based on their ip address and gps coordinates. use after obtaining device location to verify roaming status before mobile actions.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
ASN Extended Receiving From Info API
Tool to return upstream providers (receivingfrom) for a given asn. use when you need a paginated list of ases feeding traffic for the specified asn.
New Channel Created Trigger
Triggered when a new channel is created in Slack.
ASN Extended Transit To Info API
Tool to return downstream customers (transitto) for a given asn. use when you need a paginated list of ases receiving traffic from a specific asn.
Channel Message Received
Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.
ASN Rank List API
Tool to fetch a ranked list of autonomous systems by ipv4 announcement volumes. use after you need to compare or analyze as ranks.
Direct Message Received
Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.
BGP Active Prefixes API
Tool to retrieve ipv4 or ipv6 prefixes currently announced on bgp. use when inspecting bgp routing announcements for a given asn.
Message Reaction Added
Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.
Reverse Geocoding With Timezone API
Tool to return reverse geocoding and time zone info for given coordinates. use when you need both locality details and timezone data in one call.
Message Reaction Removed
Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.
Country by IP Address API
Tool to geolocate an ip address and retrieve country details and demographics. use when you need country-level data after obtaining the target ip address.
Reaction Added Trigger
DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.
Country Info API
Tool to fetch detailed country information by iso code. use when you need localized names, currencies, regions, and other metadata for a country.
Connect any two apps with Notis in the middle.
Slack and Big data cloud, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Big data cloud.