Get context for suspicious IPs shared privately
When someone sends you suspicious IPs in a Slack DM, gather their location details for an informed next step.
Trigger
Direct Message Received
Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.
Action
Bulk IP Geolocation
Tool to retrieve geolocation information for multiple IP addresses in bulk. Use when processing up to 1000 IPs at once.
Why this helps
Security concerns shared privately can be easy to lose while switching between Slack and lookup tools.
- Captures an individual security tip as it arrives
- Adds location context before follow-up
- Keeps the lookup result in the Notis run report
Setup
Build it in a few focused steps.
- 1Connect Slack and Ip2location io to Notis once in the portal.
- 2Create an automation in Automations, or tell Notis what outcome you want conversationally.
- 3In one plain-language instruction, ask Notis to look up IP addresses in a Slack DM that is flagged as suspicious and summarize the results.
- 4Select Direct Message Received and choose a channel for run reports.
- 5Test with a real DM that contains an IP address.
Questions about this workflow
Will it process DMs sent to the user?
Yes. This trigger catches direct messages across DM channels.
Can the prompt limit which messages are relevant?
Yes. State in plain language what makes a DM relevant, such as a sender calling an IP suspicious.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Slack to Ip2location io. A trigger fires from one place; an action lands in another.
Slack triggers
Ip2location io actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Bulk IP Geolocation
Tool to retrieve geolocation information for multiple IP addresses in bulk. Use when processing up to 1000 IPs at once.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Domain WHOIS Lookup
Tool to retrieve WHOIS information for a given domain. Use when you need domain registration and contact details via IP2WHOIS API.
New Channel Created Trigger
Triggered when a new channel is created in Slack.
Get API Key
Tool to retrieve the configured API key. Use when authentication is needed for IP2Location.io requests.
Channel Message Received
Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.
IP2WHOIS Hosted Domain
Tool to retrieve hosted domain names by IP address. Use when you need to list domains hosted on a given IP. Call after confirming the IP.
Direct Message Received
Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.
Message Reaction Added
Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.
Message Reaction Removed
Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.
Reaction Added Trigger
DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.
Connect any two apps with Notis in the middle.
Slack and Ip2location io, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Ip2location io.