Make security DM follow-up easier
Retrieve the organizational abuse contact for a suspicious IP discussed privately, then let the team decide on follow-up.
Trigger
Direct Message Received
Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.
Action
Get Abuse Contact
Tool to retrieve abuse contact information for a specific IP address. Use when you need organizational abuse details of an IP.
Why this helps
A private report may feel urgent but still get delayed while someone searches for the correct organizational contact.
- Bring abuse contact details into the review.
- Reduce manual contact research.
- Make the follow-up owner and next step easier to discuss.
Setup
Build it in a few focused steps.
- 1Connect Slack and Ipinfo io to Notis once in the portal.
- 2Create an automation in the portal or ask Notis to set it up in plain language.
- 3Write one instruction asking Notis to retrieve abuse contact information for suspicious IPs shared in Slack DMs.
- 4Select Direct Message Received and choose a channel for run reports.
- 5Test with one real security DM containing a suspicious IP.
Questions about this workflow
Will Notis send a report to the abuse contact?
No. The action retrieves contact details so your team can decide what to do.
Can the instruction limit lookups to security messages?
Yes. Describe the relevant DM context in the plain-language instruction.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Slack to Ipinfo io. A trigger fires from one place; an action lands in another.
Slack triggers
Ipinfo io actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Batch Lite Lookup
Tool to perform bulk Lite IP lookups. Use when you need to group up to 1000 IP or URL pattern lookups into a single request.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Batch IP Lookup
Tool to perform batch IP lookups. Use when grouping up to 1,000 IPs or URL patterns into a single POST request.
New Channel Created Trigger
Triggered when a new channel is created in Slack.
Get Abuse Contact
Tool to retrieve abuse contact information for a specific IP address. Use when you need organizational abuse details of an IP.
Channel Message Received
Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.
Get IP Carrier Info
Tool to get carrier information for a given IP address. Use when you need mobile carrier details.
Direct Message Received
Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.
Get Company Info for an IP
Tool to retrieve company info for a specific IP. Use when you need organization details behind an IP.
Message Reaction Added
Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.
Get IP Information
Tool to retrieve detailed information about an IP address. Use when you need geolocation, ASN, and network flags for a specific IP or 'me'.
Message Reaction Removed
Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.
Get IP Privacy Details
Tool to retrieve privacy-related flags (VPN, proxy, Tor, relay, hosting) for an IP address. Use when you need to detect anonymizing usage after confirming an IP.
Reaction Added Trigger
DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.
Connect any two apps with Notis in the middle.
Slack and Ipinfo io, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Ipinfo io.