Skip to content
Notis

Review the most reported IPs on a schedule

Get a recurring view of the most reported addresses, then compare the returned list with IPs in your Airparser findings.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

Why this helps

Threat intelligence can be easy to miss when parsed documents and blacklist checks happen in separate workflows.

  • Retrieve the most reported IP addresses on a recurring schedule.
  • Summarize the returned list for a focused review.
  • Compare returned addresses with Airparser findings when those findings are supplied or available to the automation.

Setup

Build it in a few focused steps.

  • 1Connect Airparser and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or ask Notis from any channel.
  • 3In one instruction, ask Notis to retrieve the most reported IPs and summarize the returned list for review alongside available Airparser findings.
  • 4Choose a recurring schedule and where run reports should go.
  • 5Test once and confirm the schedule and summary are useful.

Questions about this workflow

Does Airparser trigger this scheduled run?

No. Airparser has no trigger event listed for this package. The Notis schedule starts the run.

Can Notis compare the blacklist with parsed IPs?

It can compare data available to the automation. If Airparser findings are not available in the run context, supply them as input; do not assume missing data.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Airparser to Abuselpdb. A trigger fires from one place; an action lands in another.

Airparser triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Airparser and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.