Bring IP abuse history into incident document review
When an incident document is prepared, fetch the history for its supplied IP and keep the lookup result close to the review task.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Get Abuse Reports
Retrieves the abuse report history for an IP address.
Why this helps
Incident details and IP abuse history often live in separate places, making it harder to review the relevant context together.
- Fetch existing abuse reports for an IP supplied with the request.
- Use optional status or date filters when specified in your instruction.
- Keep the lookup result in the automation run report for review.
Setup
Build it in a few focused steps.
- 1Connect ActiveMerge and Abuselpdb once in the Notis portal.
- 2Create an automation named Review IP history for incident documents.
- 3Tell Notis to retrieve abuse reports for the IP in the webhook request and specify any status or date filters you need.
- 4Choose the webhook trigger and select where run reports should go.
- 5Send one real incident document request with an IP to test the workflow.
Questions about this workflow
What does the workflow retrieve?
It retrieves abuse reports associated with the IP in the webhook request. Optional filtering can include status, date range, reporter, or pagination when needed.
Does this create or merge an incident document?
No. The action retrieves abuse reports. ActiveMerge document creation and merging are not trigger events in this package.
Can I use this for every IP in a document?
The listed action retrieves reports for a specific IP. Supply the IP to look up in each webhook request.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link ActiveMerge to Abuselpdb. A trigger fires from one place; an action lands in another.
ActiveMerge triggers
Abuselpdb actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Retrieve IP Blacklist
Retrieves a list of widely reported malicious IP addresses.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Bulk Report
Submits multiple IP abuse reports at once.
Check Block
Checks the abuse reputation of IP addresses in a network range.
Check IP Reputation
Checks whether an IP address has been reported for abusive activity.
Clear Address Reports
Removes all abuse reports associated with a specific IP address.
Get Abuse Reports
Retrieves the abuse report history for an IP address.
Connect any two apps with Notis in the middle.
ActiveMerge and Abuselpdb, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.