Skip to content
Notis

Request an IP risk check with a reaction

Mark a relevant Slack message for review and get a risk assessment without opening another tool.

Trigger

Message Reaction Added

Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.

Action

User Risk API

Tool to return a risk assessment for a user based on ip signals for fraud prevention. use after initial ip checks to decide whether to bypass or require captcha challenges.

Why this helps

A possible risk signal can get lost when someone must remember to copy the IP and run a separate check.

  • Turn a clear team signal into a review request.
  • Keep the risk result close to the message under discussion.
  • Reduce the chance of a manual security check being forgotten.

Setup

Build it in a few focused steps.

  • 1Connect Slack and Big data cloud to Notis once through the portal.
  • 2Create an automation in the portal, or ask Notis in plain language to assess the IP when a review reaction is added to a Slack message.
  • 3Give one instruction to summarize the assessment for a person to review.
  • 4Select the Slack message reaction added trigger and choose where run reports should go.
  • 5Test with a designated reaction on a real example message containing an eligible IP.

Questions about this workflow

What does the risk check assess?

The User Risk API returns a risk assessment based on IP signals for fraud prevention.

Does the reaction automatically make a final decision?

The workflow reports the assessment for review; the supplied action is an assessment, not an approval or enforcement action.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Slack to Big data cloud. A trigger fires from one place; an action lands in another.

Slack triggers

Big data cloud actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Am I Roaming API

Tool to determine if the user is roaming based on their ip address and gps coordinates. use after obtaining device location to verify roaming status before mobile actions.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

ASN Extended Receiving From Info API

Tool to return upstream providers (receivingfrom) for a given asn. use when you need a paginated list of ases feeding traffic for the specified asn.

ActionInstant

New Channel Created Trigger

Triggered when a new channel is created in Slack.

TriggerInstant

ASN Extended Transit To Info API

Tool to return downstream customers (transitto) for a given asn. use when you need a paginated list of ases receiving traffic from a specific asn.

ActionInstant

Channel Message Received

Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.

TriggerInstant

ASN Rank List API

Tool to fetch a ranked list of autonomous systems by ipv4 announcement volumes. use after you need to compare or analyze as ranks.

ActionInstant

Direct Message Received

Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.

TriggerInstant

BGP Active Prefixes API

Tool to retrieve ipv4 or ipv6 prefixes currently announced on bgp. use when inspecting bgp routing announcements for a given asn.

ActionInstant

Message Reaction Added

Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

Reverse Geocoding With Timezone API

Tool to return reverse geocoding and time zone info for given coordinates. use when you need both locality details and timezone data in one call.

ActionInstant

Message Reaction Removed

Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

Country by IP Address API

Tool to geolocate an ip address and retrieve country details and demographics. use when you need country-level data after obtaining the target ip address.

ActionInstant

Reaction Added Trigger

DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.

TriggerInstant

Country Info API

Tool to fetch detailed country information by iso code. use when you need localized names, currencies, regions, and other metadata for a country.

ActionInstant

Connect any two apps with Notis in the middle.

Slack and Big data cloud, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Big data cloud.