Skip to content
Notis

Start a scheduled review of reported IPs

Bring the latest reported IP list into a recurring research routine, with Airtop browser work and Abuselpdb results in one run report.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

Why this helps

Threat intelligence checks are easy to postpone when they compete with a long list of founder tasks.

  • Make a recurring review easier to remember.
  • Retrieve the most reported IPs for the run.
  • Keep the resulting review summary in the chosen report channel.

Setup

Build it in a few focused steps.

  • 1Connect Airtop and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and name it.
  • 3Tell Notis to retrieve the most reported IP addresses from Abuselpdb and use Airtop browser work to review relevant public context for a concise threat intelligence summary.
  • 4Pick a recurring Notis schedule and choose where run reports go.
  • 5Test with one real scheduled run and review the report.

Questions about this workflow

Does the blacklist action provide a specific time range?

The listed action retrieves the most reported IP addresses. The available description does not specify a time range or ranking controls.

Can the browser review verify that an address is malicious?

The workflow can summarize public context found through browser work, but it should distinguish that context from Abuselpdb's returned reports.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Airtop to Abuselpdb. A trigger fires from one place; an action lands in another.

Airtop triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

Airtop and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.