Skip to content
Notis

Review widely reported IPs on a schedule

Have Notis retrieve Abuselpdb's most reported IP addresses on a recurring schedule, so threat intelligence is ready in the report channel you already check.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

Why this helps

Checking a threat intelligence feed manually can become another recurring task to remember and revisit.

  • Bring the most reported IP addresses into a recurring review.
  • Keep the returned threat intelligence in a chosen run report channel.
  • Reduce the need to remember a separate manual lookup.

Setup

Build it in a few focused steps.

  • 1Connect Addressfinder and Abuselpdb once in the Notis portal.
  • 2Create a new automation in Automations, or tell Notis from any channel.
  • 3Describe that Notis should retrieve the most reported IP addresses for a threat intelligence review.
  • 4Choose the recurring schedule and where run reports should go.
  • 5Run one real example and review the returned list.

Questions about this workflow

What does the blacklist action return?

It retrieves a list of the most reported IP addresses, which can support dynamic blocklists or threat intelligence feeds.

Does the schedule need Addressfinder trigger events?

No. Addressfinder exposes no trigger events in this setup. Notis starts this workflow on a recurring schedule.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Addressfinder to Abuselpdb. A trigger fires from one place; an action lands in another.

Addressfinder triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Addressfinder and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.