Skip to content
Notis

Check inbound IP reputation before deciding what to do

Pass an IP from your service to Notis. Get its Abuselpdb reputation checked and summarized without switching tools.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

Why this helps

When an IP looks suspicious, checking its history manually adds a context switch at the moment a quick decision matters.

  • Check an IP when your backend sends a webhook.
  • Get a plain-language summary of the reputation result.
  • Reduce manual lookups during security triage.

Setup

Build it in a few focused steps.

  • 1Connect Abstract and Abuselpdb once in the Notis portal.
  • 2Create an automation from Automations, New Automation, or tell Notis what you want from any channel.
  • 3In one instruction, ask Notis to check the IP in each webhook request with Abuselpdb and summarize the result.
  • 4Choose the webhook trigger and where run reports should go.
  • 5Test with one real IP example.

Questions about this workflow

Does Abstract start this workflow?

No. Abstract has no trigger events here. An HTTP request to a Notis webhook starts the workflow; Abstract is connected as the source-side app for its supported AI agent and API capabilities.

Can it block an IP automatically?

The listed Abuselpdb action checks reputation. Blocking an IP would require a separate supported system or action that is not specified here.

Can I set a look-back period?

The action supports a specified look-back period. Include the period you want in your instruction, such as 90 days.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abstract to Abuselpdb. A trigger fires from one place; an action lands in another.

Abstract triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Abstract and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.