Skip to content
Notis

Verify the IP behind an abuse alert

Start a focused reputation check when an alert contains an address your team needs to assess.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

Why this helps

Alert triage slows down when each address requires a separate manual lookup and context switch.

  • Add a reputation result to an alert review
  • Reduce manual lookup steps during triage
  • Keep attention on the specific address in question

Setup

Build it in a few focused steps.

  • 1Connect AimTell and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, asking Notis to check and summarize the supplied IP's reputation.
  • 3Pick a webhook trigger and configure the alert handling process to send the IP to Notis.
  • 4Choose where Notis should send run reports.
  • 5Test with one real alert IP and review the result.

Questions about this workflow

Does this workflow receive AimTell alerts directly?

No AimTell trigger events are listed. An alert handler or other process must call the Notis webhook and include the IP.

Will Notis resolve the alert automatically?

No. The workflow checks reputation and reports findings to support triage.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link AimTell to Abuselpdb. A trigger fires from one place; an action lands in another.

AimTell triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

AimTell and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.