Skip to content
Notis

Refresh Your Reported IP Blacklist

Let Notis fetch the most reported IP addresses on a schedule so threat intelligence review starts with current data.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

Why this helps

A threat intelligence list can go stale when refreshing it depends on someone remembering to check manually.

  • Keep a recurring view of the most reported addresses
  • Reduce manual feed checks
  • Send run summaries to a chosen report channel

Setup

Build it in a few focused steps.

  • 1Connect Ai ml api and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or tell Notis the outcome in plain language.
  • 3Ask Notis to retrieve the most reported IP addresses and summarize the results for review.
  • 4Choose a cron schedule and where run reports should go.
  • 5Test with one run and review the returned list.

Questions about this workflow

Does this automatically update a firewall blocklist?

No. The action retrieves blacklist data and the workflow summarizes it. Applying it to another system would require a separately supported action.

How often does it run?

Choose the recurring schedule when setting up the Notis cron trigger.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Ai ml api to Abuselpdb. A trigger fires from one place; an action lands in another.

Ai ml api triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Ai ml api and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.