Skip to content
Notis

Bring source context into an IP reputation check

Start a focused review from a webhook. Notis can ask AgentQL to inspect a supplied page or report, extract the relevant IP, and check its reputation in Abuselpdb.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

Why this helps

An IP address without its surrounding source context is hard to prioritize and easy to lose during investigation.

  • Pair an IP lookup with the source that prompted it.
  • Keep the look-back period explicit in the instruction.
  • Get one report that captures the lookup result and context.

Setup

Build it in a few focused steps.

  • 1Connect AgentQL and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or tell Notis in plain language from any channel.
  • 3In one instruction, ask AgentQL to inspect the provided source for the relevant IP and ask Abuselpdb to check it over a specified look-back period.
  • 4Pick the Notis webhook trigger and choose where run reports should go.
  • 5Test with one real example using a source that contains a known IP address.

Questions about this workflow

What if the source has more than one IP?

Tell Notis how to select the relevant address, such as focusing on the IP tied to a named event or report.

Can I set a look-back period?

Yes. Include the desired number of days in the instruction for the IP reputation check.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Agentql to Abuselpdb. A trigger fires from one place; an action lands in another.

Agentql triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Agentql and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.