Turn confirmed abuse reports into DNS blocks
Send an IP for review. When its abuse reports identify malicious hostnames, add those hostnames as custom rules in the chosen Control D profile.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Create Custom Rules for Profile
Why this helps
Abuse reports can identify threats, but manually carrying each confirmed hostname into DNS rules adds another task and another chance to miss it.
- Reduce manual copying between abuse reports and DNS policies.
- Keep the profile and rule changes visible in Control D.
- Use report evidence to decide which hostnames to add.
Setup
Build it in a few focused steps.
- 1Connect Abuselpdb and Control D once in Notis.
- 2Create an automation in Notis and give it a clear name.
- 3Tell Notis to check the submitted IP's abuse reports and add only confirmed malicious hostnames as custom rules in the specified profile.
- 4Pick a webhook trigger and choose where run reports should go.
- 5Test with one real IP and a profile you have verified.
Questions about this workflow
What starts this automation?
An HTTP request to the automation's webhook starts it. Include the IP to check and identify the Control D profile in your instruction or request.
Will it block the reported IP directly?
This workflow adds hostnames as custom DNS rules. Use it only when the abuse reports provide hostnames and you have confirmed the rule behavior you want.
What if the reports do not include a hostname?
Notis should make no DNS rule change and report that there was no hostname to add.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Abuselpdb to Control d. A trigger fires from one place; an action lands in another.
Abuselpdb triggers
Control d actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Delete Device by ID
Permanently deletes a device, breaking DNS resolution on gadgets using its resolvers.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Profile
Permanently deletes a profile only if no devices enforce it; assigned profiles cannot be deleted.
Delete Profile Rule by Rule ID
Delete a custom DNS filtering rule from a profile.
Delete Rule from Folder
Permanently deletes a custom DNS rule from a profile folder.
Delete Profile Schedule
Delete a schedule from a profile.
List Known Access IPs
List recent IP addresses used to query a device.
Get Analytics Endpoints
Lists available analytics regions and their endpoints.
Get Analytics Levels
Lists the available analytics levels for devices.
Connect any two apps with Notis in the middle.
Abuselpdb and Control d, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Control d.