Skip to content
Notis

Check abuse data for a parsed network block

When a document includes a CIDR range, send it to Abuselpdb for an aggregate abuse check and a readable summary.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Check Block

Checks the abuse reputation of IP addresses in a network range.

Why this helps

Network ranges in reports can be harder to investigate than individual IPs, leading to extra manual lookups.

  • Check aggregate abuse data for the supplied CIDR range.
  • Summarize the returned block-level information.
  • Keep network checks tied to the document or email that supplied the range.

Setup

Build it in a few focused steps.

  • 1Connect Airparser and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or ask Notis from any channel.
  • 3In one instruction, ask Notis to check the CIDR range in each incoming parsed payload and summarize the returned aggregate data.
  • 4Choose the webhook trigger and where run reports should go.
  • 5Test with one real Airparser payload containing a CIDR range.

Questions about this workflow

Does this check every address individually?

The selected action checks reputation data for the CIDR range as a network block and returns aggregate abuse data.

What if the parsed document has only a single IP?

This workflow expects a CIDR range. Use an IP reputation check for a single address.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Airparser to Abuselpdb. A trigger fires from one place; an action lands in another.

Airparser triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Airparser and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.