Skip to content
Notis

Review the most reported IPs on a schedule

Have Notis retrieve Abuselpdb's list of the most reported IP addresses on a recurring schedule, then summarize the results so the list is easier to review.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

Why this helps

Threat intelligence lists are easy to forget when reviewing them depends on remembering to open another tool.

  • Keep a recurring review from slipping off your task list.
  • Turn the retrieved list into a concise report.
  • Use a regular review cadence without manually opening Abuselpdb.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or tell Notis in plain language from any channel.
  • 3In one instruction, ask Notis to retrieve the most reported IP addresses and summarize the results for review.
  • 4Pick the Notis schedule trigger and choose where run reports should go.
  • 5Test with one real example by running the automation and reviewing the retrieved list.

Questions about this workflow

Does this workflow create a firewall blocklist?

No. The available action retrieves the most reported IP addresses. It does not update a firewall or other blocklist.

Can I choose how often it runs?

Yes. Choose a recurring schedule when selecting the Notis cron trigger.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Agentql to Abuselpdb. A trigger fires from one place; an action lands in another.

Agentql triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Agentql and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.