Skip to content
Notis

Assess the calling IP when a Slack request asks

Give an explicit request about the current connection a focused threat check without requiring someone to find and paste an IP.

Trigger

Direct Message Received

Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.

Action

Get Threat for IP

Tool to return only the threat object for the calling IP. Use when only the threat details are required for the current IP.

Why this helps

A request about the current connection can stall when the relevant address is not in the message.

  • Use the dedicated action for threat details on the calling client's IP.
  • Avoid asking for an IP that the request is specifically about the current connection.
  • Keep the result tied to the direct request.

Setup

Build it in a few focused steps.

  • 1Connect Slack and Ipdata co to Notis once through the portal.
  • 2Create an automation or ask Notis to check the calling IP's threat profile when explicitly requested in a Slack DM.
  • 3Write one instruction to run the calling-IP threat action only for requests about assessing the current connection, then report the result.
  • 4Select Direct Message Received and choose a channel for run reports.
  • 5Test with a real DM-style request about checking the current connection.

Questions about this workflow

Does this inspect the DM sender's device IP?

The Ipdata action is described as the calling client's IP. Do not assume it identifies the DM sender's device address.

When should this run?

Use an instruction that requires an explicit request to assess the calling IP, rather than running for general security questions.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Slack to Ipdata co. A trigger fires from one place; an action lands in another.

Slack triggers

Ipdata co actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Advanced ASN Lookup

Tool to perform advanced ASN lookup returning prefixes, peers, and registry details. Use after confirming ASN number when detailed ASN info is required.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Carrier Data for an IP

Tool to return mobile carrier data for a specific IP. Use when you need carrier name, MCC, and MNC for an IP address.

ActionInstant

New Channel Created Trigger

Triggered when a new channel is created in Slack.

TriggerInstant

EU-specific IP lookup

Tool to lookup a specific IP address via the EU-only data residency endpoint. Use when you need IP lookup processed and stored within the EU.

ActionInstant

Channel Message Received

Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.

TriggerInstant

IPData: Calling Code

Tool to fetch the international calling_code for an IP's country. Use when you need only the calling code field from ipdata_co.

ActionInstant

Direct Message Received

Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.

TriggerInstant

IPDATA Field Carrier

Tool to return only the carrier object for the calling IP. Use when you need mobile carrier details of a specific IP.

ActionInstant

Message Reaction Added

Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

Get City from IP

Tool to return only city for an IP. Use when only the city name is required.

ActionInstant

Message Reaction Removed

Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

IPData: Continent Code

Tool to return only continent_code for an IP. Use when only the continent code is required.

ActionInstant

Reaction Added Trigger

DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.

TriggerInstant

Get Continent Name from IP

Tool to return only continent name for an IP. Use when only the continent name is required.

ActionInstant

Connect any two apps with Notis in the middle.

Slack and Ipdata co, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Ipdata co.