Skip to content
Notis

Bring historical reports into an IP investigation

Send a source or investigation context to a Notis webhook. Notis can use AgentQL to inspect it and retrieve Abuselpdb reports for the IP you specify.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Get Abuse Reports

Retrieves the abuse report history for an IP address.

Why this helps

Historical abuse details can live outside the investigation context, forcing you to repeat searches and lose time.

  • Retrieve historic reports for a specified IP.
  • Use optional report filters to focus the lookup.
  • Keep source context and report history together in one run report.

Setup

Build it in a few focused steps.

  • 1Connect AgentQL and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or tell Notis in plain language from any channel.
  • 3In one instruction, ask AgentQL to inspect the supplied source and specify the IP and any report filters for Abuselpdb to retrieve.
  • 4Pick the Notis webhook trigger and choose where run reports should go.
  • 5Test with one real example using an IP with known historic reports.

Questions about this workflow

Can the workflow retrieve reports for an IP AgentQL finds?

Yes, if your instruction tells Notis how to select the IP and AgentQL can identify it in the supplied source.

Which report filters are available?

You can request optional filters for status, date range, reporter, and pagination.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Agentql to Abuselpdb. A trigger fires from one place; an action lands in another.

Agentql triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Agentql and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.