Skip to content
Notis

Bring an IP's abuse history into an investigation

See the available report history alongside the incident context, without manually reopening a separate lookup.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Get Abuse Reports

Retrieves the abuse report history for an IP address.

Why this helps

Investigations lose momentum when report history is scattered across separate tools and must be fetched by hand.

  • Retrieve historic reports for the IP in question.
  • Specify available filters such as status, date range, reporter, or pagination.
  • Get a concise summary for the investigation run report.

Setup

Build it in a few focused steps.

  • 1Connect AnyDB and Abuselpdb once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and give it a clear name.
  • 3Tell Notis to retrieve abuse reports for the submitted IP, including any status, date range, reporter, or pagination filters you need.
  • 4Choose notis_webhook as the trigger and choose where run reports go.
  • 5Test with one real IP and review the returned reports.

Questions about this workflow

Can I filter the reports?

Yes. The action supports optional status, date range, reporter, and pagination filters. State the filters you want in your instruction.

Will it retrieve reports without an IP?

The action requires a specific IP. Ensure the webhook request includes the IP to investigate.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link AnyDB to Abuselpdb. A trigger fires from one place; an action lands in another.

AnyDB triggers

Abuselpdb actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Retrieve IP Blacklist

Retrieves a list of widely reported malicious IP addresses.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Bulk Report

Submits multiple IP abuse reports at once.

ActionInstant

Check Block

Checks the abuse reputation of IP addresses in a network range.

ActionInstant

Check IP Reputation

Checks whether an IP address has been reported for abusive activity.

ActionInstant

Clear Address Reports

Removes all abuse reports associated with a specific IP address.

ActionInstant

Get Abuse Reports

Retrieves the abuse report history for an IP address.

ActionInstant

Connect any two apps with Notis in the middle.

AnyDB and Abuselpdb, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.