Investigate hosted domains behind a flagged source IP
When a case needs deeper investigation, collect hosted-domain context alongside the moderation signal.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
IP2WHOIS Hosted Domains Lookup
Tool to retrieve hosted domains for a given IP address. Use when you need to list domains hosted on an IP.
Why this helps
A concerning source IP can prompt a separate investigation that is easy to postpone or forget.
- Retrieves domains hosted on an IP included with a forwarded case.
- Creates a useful starting point for a human investigation.
- Keeps the lookup result with the Notis run report.
Setup
Build it in a few focused steps.
- 1Connect Tisane and Ip2location to Notis once in the portal.
- 2Create an automation from the portal or by asking Notis in plain language.
- 3Tell Notis in one instruction to retrieve hosted domains for the source IP on each backend-forwarded Tisane moderation case and summarize the findings for investigation.
- 4Choose an incoming webhook trigger and a channel for run reports.
- 5Test with one real case and an IP you are authorized to investigate.
Questions about this workflow
Does a hosted-domain result establish who sent the content?
No. It lists domains hosted on an IP and is only an investigative lead; it does not identify a person or establish responsibility.
When should I use this lookup?
Use it when a flagged case merits infrastructure research, rather than for every routine moderation alert.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Tisane to Ip2location. A trigger fires from one place; an action lands in another.
Tisane triggers
Ip2location actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Bulk IP Geolocation
Tool to retrieve geolocation information for multiple IP addresses in bulk. Use when you need batch processing of up to 1000 IPs per request.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Check IP2Location API Credits
Tool to check remaining IP2Location API credits. Use after setting up authentication to monitor usage.
IP2WHOIS Hosted Domains Lookup
Tool to retrieve hosted domains for a given IP address. Use when you need to list domains hosted on an IP.
IP2Location Get IP Geolocation
Tool to retrieve geolocation data for an IP address. Use when detailed IP location info is needed.
IP2Proxy: Get Proxy Detection
Tool to detect if an IP is a proxy, VPN, or TOR exit node. Use when verifying anonymizing services.
IP2Location Distance Calculator
Tool to calculate distance between two IPs. Use when geographic separation between two IP addresses is needed.
IP2WHOIS Domain WHOIS Lookup
Tool to retrieve WHOIS information for a domain. Use when you need domain registration details.
IP2Location List IPs
Tool to list a curated set of test IPv4 and IPv6 addresses. Use when sample IPs are needed for IP2Location or IP2Proxy lookups during development or testing.
Connect any two apps with Notis in the middle.
Tisane and Ip2location, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Ip2location.