Investigate IPs from bot alerts
Give automated alerts a useful Dnsfilter context before a human steps in.
Trigger
New Bot Message Received Trigger
DEPRECATED: use `SLACK_CHANNEL_MESSAGE_RECEIVED` with `is_bot_message=true` instead. Triggered when a new bot message is posted to a Slack channel.
Action
Get IP Address
Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.
Why this helps
Bot alerts often contain enough detail for a lookup but still require a manual console visit.
- Adds context to automated alerts
- Reduces manual lookups
- Keeps triage tied to the alert message
Setup
Build it in a few focused steps.
- 1Connect Slackbot and Dnsfilter once in Notis
- 2Create an automation named Bot alert IP lookup
- 3Tell Notis to extract the IP from the bot alert and retrieve its Dnsfilter details
- 4Pick New Bot Message Received as the trigger and choose a report channel
- 5Test with one real bot alert
Questions about this workflow
What if the alert has no IP address?
The workflow needs an IP in the message to perform the lookup.
Does it change the IP record?
No. It retrieves basic IP information only.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Slackbot to Dnsfilter. A trigger fires from one place; an action lands in another.
Slackbot triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Application Category
Tool to get basic information of a specific application category. use when you need details for a given application category id.
New Channel Created Trigger
Triggered when a new channel is created in Slack.
Get Billing Information
Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.
Channel Message Received
Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.
Get Category
Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.
Direct Message Received
Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.
Get IP Address
Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.
Message Reaction Added
Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.
List All Categories
Tool to list all categories including internal categories. use when you need the complete set of filtering categories.
Message Reaction Removed
Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.
List All IP Addresses
Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.
Reaction Added Trigger
DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.
List All MAC Addresses
Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.
Connect any two apps with Notis in the middle.
Slackbot and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.