Skip to content
Notis

Refresh the reported IP blacklist on a schedule

Keep a recurring view of widely reported IP addresses available for your document security review routine.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

Why this helps

Manually checking for commonly reported IPs adds another recurring task to an already busy review process.

  • Retrieve a list of the most reported IP addresses on a recurring schedule.
  • Review the latest retrieval in a Notis run report.
  • Use the results as input to a separate process that evaluates document related IPs.

Setup

Build it in a few focused steps.

  • 1Connect ActiveMerge and Abuselpdb once in the Notis portal.
  • 2Create an automation named Refresh reported IP blacklist.
  • 3Tell Notis to retrieve the most reported IP addresses and make the result available in the run report for review.
  • 4Choose a recurring schedule and select where run reports should go.
  • 5Test with one real scheduled run and review the returned list.

Questions about this workflow

Does this automatically block listed IPs?

No. The action retrieves a list. Blocking or applying it to another system is not included in the listed actions.

What does the blacklist contain?

The action retrieves a list of the most reported IP addresses.

Does ActiveMerge start this workflow?

No ActiveMerge trigger is listed. Notis starts this workflow on the recurring schedule you choose.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link ActiveMerge to Abuselpdb. A trigger fires from one place; an action lands in another.

ActiveMerge triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

ActiveMerge and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.