Check suspicious visitor IPs before they become a bigger problem
Send a website or security signal to a Notis webhook. Notis can ask AgentQL to inspect the relevant page or source, extract an IP, and check it with Abuselpdb.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Check IP Reputation
Checks whether an IP address has been reported for abusive activity.
Why this helps
A suspicious IP can get buried in browser tabs and security alerts while you decide whether it needs attention.
- Check an extracted IP without switching between research and reputation tools.
- Get a focused run report for each webhook request.
- Use a specified look-back period when checking reputation.
Setup
Build it in a few focused steps.
- 1Connect AgentQL and Abuselpdb once in the Notis portal.
- 2Create an automation in Automations, New Automation, or tell Notis in plain language from any channel.
- 3In one instruction, describe which website or security source AgentQL should inspect, how to identify the IP, and the look-back period for the reputation check.
- 4Pick the Notis webhook trigger and choose where run reports should go.
- 5Test with one real example by sending a webhook request containing a page or source for AgentQL to inspect.
Questions about this workflow
Does AgentQL start this workflow?
No. AgentQL has no trigger event in this workflow package. A Notis webhook starts the automation, and the instruction can ask AgentQL to inspect the supplied source.
Can the workflow decide whether to block an IP?
The listed action checks reputation. It does not block an IP, so use the report as evidence for a separate decision.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Agentql to Abuselpdb. A trigger fires from one place; an action lands in another.
Agentql triggers
Abuselpdb actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Retrieve IP Blacklist
Retrieves a list of widely reported malicious IP addresses.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Bulk Report
Submits multiple IP abuse reports at once.
Check Block
Checks the abuse reputation of IP addresses in a network range.
Check IP Reputation
Checks whether an IP address has been reported for abusive activity.
Clear Address Reports
Removes all abuse reports associated with a specific IP address.
Get Abuse Reports
Retrieves the abuse report history for an IP address.
Connect any two apps with Notis in the middle.
Agentql and Abuselpdb, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.