Skip to content
Notis

Add geolocation context to fraud reviews

Turn the IPs in a fraud review message into a single batch lookup, ready for the team to assess.

Trigger

Channel Message Received

Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.

Action

Bulk IP Geolocation

Tool to retrieve geolocation information for multiple IP addresses in bulk. Use when processing up to 1000 IPs at once.

Why this helps

Reviewers lose time copying multiple IPs into separate lookup pages while keeping track of the case.

  • Looks up several IPs together
  • Reduces repetitive copy-and-paste
  • Makes geographic context available alongside the review

Setup

Build it in a few focused steps.

  • 1Connect Slack and Ip2location io once through the Notis portal.
  • 2Create an automation from Automations, or tell Notis what to do in plain language.
  • 3In one instruction, ask Notis to find IP addresses in Slack fraud-review messages, look them up in bulk, and summarize their location details.
  • 4Select Channel Message Received and choose a run-report channel.
  • 5Test using a real review message with multiple IPs.

Questions about this workflow

How many addresses can a bulk lookup process?

The action supports up to 1,000 IP addresses at once.

Can the workflow run for any Slack channel message?

Describe fraud-review context in the prompt to guide which messages Notis should handle.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Slack to Ip2location io. A trigger fires from one place; an action lands in another.

Slack triggers

Ip2location io actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Bulk IP Geolocation

Tool to retrieve geolocation information for multiple IP addresses in bulk. Use when processing up to 1000 IPs at once.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Domain WHOIS Lookup

Tool to retrieve WHOIS information for a given domain. Use when you need domain registration and contact details via IP2WHOIS API.

ActionInstant

New Channel Created Trigger

Triggered when a new channel is created in Slack.

TriggerInstant

Get API Key

Tool to retrieve the configured API key. Use when authentication is needed for IP2Location.io requests.

ActionInstant

Channel Message Received

Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.

TriggerInstant

IP2WHOIS Hosted Domain

Tool to retrieve hosted domain names by IP address. Use when you need to list domains hosted on a given IP. Call after confirming the IP.

ActionInstant

Direct Message Received

Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.

TriggerInstant

Message Reaction Added

Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

Message Reaction Removed

Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

Reaction Added Trigger

DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.

TriggerInstant

Connect any two apps with Notis in the middle.

Slack and Ip2location io, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Ip2location io.