Check incident IP reputation from a webhook
Give every upstream incident signal a consistent reputation check.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Check IP Reputation
Tool to check the reputation of an ip address. use when you need to determine if an ip address has been reported for abusive activity within a specified look-back period. example: checkip(ipaddress='8.8.8.8', maxageindays=90).
Why this helps
Incident systems often produce alerts faster than teams can manually investigate each IP.
- Standardize incoming checks
- Reduce investigation latency
- Connect existing alert sources
Setup
Build it in a few focused steps.
- 1Connect Discord and Abuselpdb in Notis once.
- 2Create an automation that validates the webhook IP and checks its reputation.
- 3Pick a Notis webhook trigger.
- 4Choose the Discord channel for run reports.
- 5Test with one real incident payload.
Questions about this workflow
What if the payload is malformed?
Ask Notis to report the validation problem and avoid running the lookup.
Can the look-back period be specified?
Yes. Include it in the automation instruction or payload contract.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Discord to Abuselpdb. A trigger fires from one place; an action lands in another.
Discord triggers
Abuselpdb actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Retrieve IP Blacklist
Tool to retrieve a list of the most reported ip addresses. use when building dynamic blocklists or threat intelligence feeds.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Bulk Report
Tool to submit multiple ip abuse reports in bulk. use when you need to report a large set of ips at once by uploading a csv file with required headers. csv must include columns: ip, categories, reportdate, comment.
New Discord Message Trigger
Polls a specific Discord channel for new messages.
Check Block
Tool to check the reputation of all ip addresses in a cidr range. use when you need aggregated abuse data for a network block.
New Member Joined
Triggered when a new member joins a Discord server (guild) you manage.
Check IP Reputation
Tool to check the reputation of an ip address. use when you need to determine if an ip address has been reported for abusive activity within a specified look-back period. example: checkip(ipaddress='8.8.8.8', maxageindays=90).
Message Reaction Added
Triggered when a reaction (emoji) is added to a message in a monitored Discord channel.
Clear Address Reports
Tool to remove all reports associated with a specific ip address. use when you need to purge your own abuse records after verifying control of the ip.
New Thread Created
Triggered when a new thread is created in a Discord channel within a monitored server.
Get Abuse Reports
Tool to retrieve a list of abuse reports for a specific ip address. use when you need to fetch historic reports with optional filtering by status, date range, reporter, and pagination.
Message Edited
Triggered when an existing message in a monitored Discord channel is edited.
Connect any two apps with Notis in the middle.
Discord and Abuselpdb, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.