Skip to content
Notis

Check the reputation before escalating an IP

Add a reputation check between collecting an address and deciding whether it needs more attention.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

Why this helps

Collected IPs can look suspicious without enough context, creating avoidable investigation work or delayed escalation.

  • Check a supplied address with Abuselpdb before deciding on follow-up.
  • Summarize only the reputation information returned by the check.
  • Ask Agenty for relevant public context when it helps an investigator.

Setup

Build it in a few focused steps.

  • 1Connect Agenty and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or tell Notis from any channel.
  • 3In one instruction, ask Notis to check the supplied IP with Abuselpdb and summarize the returned data for human review before escalation.
  • 4Pick a webhook trigger, choose where run reports go, and test with one real example.

Questions about this workflow

Does this workflow decide whether to escalate?

It can summarize returned information for review. Your instruction should define any decision criteria, and missing criteria or evidence must not be assumed.

Can the IP come from an Agenty workflow?

Yes, your process can send the IP to the Notis webhook after Agenty collects it. Agenty does not provide a listed trigger event in this package.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Agenty to Abuselpdb. A trigger fires from one place; an action lands in another.

Agenty triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Agenty and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.