Skip to content
Notis

Check the reputation of IP addresses in incoming documents

Catch suspicious addresses mentioned in invoices, reports, or other documents without interrupting your review flow.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

Why this helps

IP addresses buried in documents can be easy to miss when you are already moving between document processing and security checks.

  • Review document IPs in one automated pass
  • Reduce context switching between document processing and threat checks
  • Get a run report with the reputation results

Setup

Build it in a few focused steps.

  • 1Connect Affinda and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and give it a name and prompt.
  • 3Describe that Notis should inspect the submitted document content for IP addresses and check each address with Abuselpdb.
  • 4Choose the Notis webhook trigger and select where run reports should go.
  • 5Test the automation with one real document submitted through the webhook.

Questions about this workflow

Does Affinda start this automation directly?

No. Affinda has no listed trigger event here. A Notis webhook starts the automation when a request is sent to it.

What happens if the document contains no IP addresses?

Instruct Notis to report that no addresses were found and skip the reputation check.

Does this workflow parse every document format?

Affinda can extract data from documents, but the result depends on the submitted document and the extraction context.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Affinda to Abuselpdb. A trigger fires from one place; an action lands in another.

Affinda triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Affinda and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.