Skip to content
Notis

Review multiple IPs from one Slack message

Handle a batch of IPs in one focused lookup when an incident or audit message already lists them together.

Trigger

Channel Message Received

Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.

Action

IPData Bulk Lookup V1

Tool to bulk lookup up to 100 IP addresses via ipdata.co. Use when you have multiple IPs and need geolocation and threat data in one call.

Why this helps

Looking up a long list of IPs one by one creates repetitive work and breaks concentration.

  • Look up as many as 100 IP addresses in one bulk action.
  • Reduce repetitive one-at-a-time checks.
  • Keep the batch result linked to the Slack request that collected the addresses.

Setup

Build it in a few focused steps.

  • 1Connect Slack and Ipdata co to Notis once through the portal.
  • 2Create an automation in the portal or ask Notis to bulk-check IP lists shared in Slack.
  • 3Provide one instruction to identify a batch investigation message, collect its IP addresses, and use Ipdata co bulk lookup.
  • 4Select Channel Message Received and choose a channel for run reports.
  • 5Test with a real investigation-style message containing a small list of IPs.

Questions about this workflow

How many IPs can one bulk lookup handle?

The listed Ipdata co bulk lookup supports up to 100 IP addresses.

Will it run for a message with just one IP?

Describe in the instruction that this workflow is intended for a batch request, so a single-IP message can be handled separately.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Slack to Ipdata co. A trigger fires from one place; an action lands in another.

Slack triggers

Ipdata co actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Advanced ASN Lookup

Tool to perform advanced ASN lookup returning prefixes, peers, and registry details. Use after confirming ASN number when detailed ASN info is required.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Carrier Data for an IP

Tool to return mobile carrier data for a specific IP. Use when you need carrier name, MCC, and MNC for an IP address.

ActionInstant

New Channel Created Trigger

Triggered when a new channel is created in Slack.

TriggerInstant

EU-specific IP lookup

Tool to lookup a specific IP address via the EU-only data residency endpoint. Use when you need IP lookup processed and stored within the EU.

ActionInstant

Channel Message Received

Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.

TriggerInstant

IPData: Calling Code

Tool to fetch the international calling_code for an IP's country. Use when you need only the calling code field from ipdata_co.

ActionInstant

Direct Message Received

Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.

TriggerInstant

IPDATA Field Carrier

Tool to return only the carrier object for the calling IP. Use when you need mobile carrier details of a specific IP.

ActionInstant

Message Reaction Added

Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

Get City from IP

Tool to return only city for an IP. Use when only the city name is required.

ActionInstant

Message Reaction Removed

Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

IPData: Continent Code

Tool to return only continent_code for an IP. Use when only the continent code is required.

ActionInstant

Reaction Added Trigger

DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.

TriggerInstant

Get Continent Name from IP

Tool to return only continent name for an IP. Use when only the continent name is required.

ActionInstant

Connect any two apps with Notis in the middle.

Slack and Ipdata co, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Ipdata co.