Skip to content
Notis

Review the most reported IPs on a schedule

Get a regular view of heavily reported IP addresses without remembering to run a separate lookup.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

Why this helps

Threat intelligence checks are easy to postpone when they depend on someone remembering to open another tool.

  • Retrieve a fresh list of the most reported IP addresses on a recurring schedule.
  • Make threat intelligence review a predictable part of agency operations.
  • Keep results available in the chosen Notis run report channel.

Setup

Build it in a few focused steps.

  • 1Connect AgencyZoom and Abuselpdb once in the Notis portal.
  • 2Create a Notis automation named for the recurring IP list review.
  • 3Tell Notis to retrieve the most reported IP addresses from Abuselpdb and summarize the returned list for review.
  • 4Select a recurring schedule and choose where run reports should go.
  • 5Test with one real run and confirm the returned list is useful.

Questions about this workflow

Does this workflow read AgencyZoom records?

No AgencyZoom trigger events are listed, so this workflow uses a Notis schedule and retrieves the Abuselpdb IP blacklist.

What does Retrieve IP Blacklist return?

It retrieves a list of the most reported IP addresses, useful for dynamic blocklists or threat intelligence feeds.

Will this block the returned addresses automatically?

No. It retrieves the list and reports it for review. Blocking requires a separate system and action not specified here.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Agencyzoom to Abuselpdb. A trigger fires from one place; an action lands in another.

Agencyzoom triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Agencyzoom and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.