Skip to content
Notis

See the abuse reputation across a network block

Send a network block and relevant context to a Notis webhook. Notis can use AgentQL to inspect the source you provide and Abuselpdb to check the CIDR's aggregated abuse data.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Check Block

Checks the abuse reputation of IP addresses in a network range.

Why this helps

Reviewing a network as a whole can take longer than checking one address, especially when the context is spread across sources.

  • Check aggregated abuse data for a CIDR range.
  • Keep source inspection and the network reputation lookup in one run.
  • Receive a report that helps prioritize further investigation.

Setup

Build it in a few focused steps.

  • 1Connect AgentQL and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or tell Notis in plain language from any channel.
  • 3In one instruction, ask AgentQL to inspect the supplied network context and Abuselpdb to check the CIDR range provided in the request.
  • 4Pick the Notis webhook trigger and choose where run reports should go.
  • 5Test with one real example by sending a webhook request with a CIDR range and its source context.

Questions about this workflow

What does the Abuselpdb action check?

It checks aggregated abuse data for all IP addresses in a CIDR range.

Will AgentQL discover a CIDR automatically?

Only if the source you ask AgentQL to inspect contains enough information. Include the CIDR in the webhook request when it is already known.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Agentql to Abuselpdb. A trigger fires from one place; an action lands in another.

Agentql triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Agentql and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.