Auto-Check IP Reputation on New Incident
When you create a new security incident page in Notion, Notis immediately checks the IP reputation in Abuselpdb so you have context before you start investigating.
Connect Notion to Abuselpdb
When something happens in Notion, Notis takes the next step in Abuselpdb. Describe what you want in plain English, or start from one of the examples below.
When this happens · Trigger
Fires when a new comment is created in the accessible workspace.
Do this · Action
Retrieves a list of widely reported malicious IP addresses.
Examples
Ways Notis can move work from Notion to Abuselpdb
Fetch Abuse History When Incident Rows Added
Each time you add a new row to your incidents database, Notis retrieves the complete abuse report history for that IP from Abuselpdb, populating context automatically.
Bulk Report When Incident Status Changes to Reported
Mark an incident 'Reported' in Notion, and Notis automatically submits it as a bulk abuse report to Abuselpdb, closing the loop without you leaving your task list.
Daily Blacklist Retrieval for Threat Intelligence
Every morning, Notis pulls the latest IP blacklist from Abuselpdb and logs it to Notion so you have current threat intelligence without manual lookup.
Check IP Reputation When Property is Updated
When you update an IP address field in Notion (change it, replace it, add a new one), Notis instantly checks the new IP's reputation in Abuselpdb.
Check IP Reputation When Mentioned in Comments
Team members mention a suspicious IP in a Notion comment, and Notis automatically checks its reputation in Abuselpdb, logging findings so no comment goes unverified.
Instant IP Check on External Security Alerts
Your security tools send alerts via webhook; Notis receives them and immediately checks the IP reputation in Abuselpdb before you even see the notification.
Check Network Block Reputation for Suspected Ranges
When you create a page in Notion for a suspect network CIDR block, Notis checks the entire block's reputation in Abuselpdb to see how many IPs are compromised.
Remove Abuse Records When IP is Whitelisted
Mark an IP as 'Cleared' or 'Whitelist' in Notion, and Notis automatically removes its reports from Abuselpdb, cleaning up false positives without manual effort.
Supported Triggers and Actions
Notis builds workflows that link Notion to Abuselpdb. A trigger fires from one place; an action lands in another.
Notion triggers
Abuselpdb actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
TriggerScheduled
Retrieve IP Blacklist
Retrieves a list of widely reported malicious IP addresses.
ActionInstant
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
TriggerInstant
Bulk Report
Submits multiple IP abuse reports at once.
ActionInstant
Comment Created
Fires when a new comment is created in the accessible workspace.
TriggerInstant
Check Block
Checks a network block for abuse reports; available ranges and look-back periods depend on your plan.
ActionInstant
Database Created
Fires when a new database container is created.
TriggerInstant
Check IP Reputation
Checks whether an IP address has been reported for abusive activity.
ActionInstant
Data Source Created
Fires when a new data source is created in the workspace.
TriggerInstant
Clear Address Reports
Removes reports for an IP address from your AbuseIPDB account.
ActionInstant
Data Source Schema Updated
Fires when a data source’s columns are added, removed, or renamed.
TriggerInstant
Get Abuse Reports
Retrieves paginated abuse reports for an IP address from AbuseIPDB.
ActionInstant
Page Content Updated
Fires when the body content of an accessible page is updated.
TriggerInstant
Page Created
Fires when a new page is created in the accessible workspace.
TriggerInstant
Trigger Types
Four ways to start an automation.
A trigger is the event that kicks a workflow off. Notis supports four kinds: an event in a connected app, an inbound webhook, a schedule (recurring or one-time), and a change in one of your Notis databases.
Integration triggers
Fire when something happens inside a connected app. New Notion page, Stripe charge, Linear issue: any of 1,500+ apps can start a workflow.
New Notion pageStripe chargeCalendar event
Webhook triggers
A unique URL per workflow. Anything that can send an HTTP POST can start an automation, including no-code tools that speak webhooks.
Any HTTP POSTCustom backendIoT event
Works with
ZapierPipedream
Most used
Scheduled triggers
Run a workflow on the clock, on a recurring schedule or once at a set date and time. Daily standups, hourly syncs, a one-off launch reminder: the workhorse of Notis.
Daily · 8:00Weekdays onlyOnce · Dec 13
Beta
Database triggers
Fire when a row in one of your Notis databases is added or edited, with optional filters on its properties. New lead added, status changed, value crosses a limit.
Row addedProperty editedValue > limit
Why AI automation
Classic automation breaks. AI adapts.
Same triggers and actions, smarter middle. AI handles the fuzziness that breaks traditional Zapier-style workflows the moment a field gets renamed.
Classic automationAI automation
Cost
$ · pay per run
$$ · AI models per run
Reliability
Breaks on schema change
Adapts to format changes
Setup
Click 8 dropdowns
Describe it in English
Handles fuzzy
Hard-coded fields only
Reads intent, summarises
Human in loop
Bolted on
Built in · approval inbox
Maintenance
You own every break
Self-heals · we own it
Ease of use
Describe it. Notis builds it.
Skip the visual builder. Tell Notis what you want, in plain English. It writes the workflow, you review and deploy.
You · in the Notis Builder
NEW“When a row gets added to the Q4 OKRs Notion database and the status is Blocked, send a Telegram message to the owner with a summary of what's blocking, and ping me if there's no reply within 24 hours.”
Notis built this automation:
TriggerRow added to "Q4 OKRs"
Condition✦Status = "Blocked"
AI step✦Summarise the blocker in plain English
ActionDM the row owner with summary
Timeout✦No reply in 24h → ping you
Observability
Watch every run.
Notis Desktop is Mission Control for your AI automations. See every run, replay, edit, or rewind. Set approval gates so Notis pauses before destructive actions.
- Full run history with inputs, outputs and traces
- Replay any run with edited inputs
- Approval inbox, confirm via chat in one tap
- Audit logs for compliance teams
Automations
Inbox
All12Manager5Telegram1Messages0WhatsApp2Email4Slack8
Migrate background jobs to a durable queue You can cancel it through Stripe
3 daysNotis v3 release update This one’s v3: Notis Manager (desktop app with …
8 daysAdd multi-tenant RBAC User initiates a voice call
13 daysDraft pricing v (tiers, limits, overages) and sanity-check margins
2 weeksVerify analytics events for new features That’s a really interesting automat…
1 monthEverything in the box.
Whatever starts the workflow, the platform underneath is the same: a thinking brain, full visibility, and you in control.
AI in the middle
Every step can include an LLM call: summarise, classify, extract, rewrite.
Full observability
Every run, every step, every input, all replay-able from Mission Control.
Human in the loop
Pause for approval. Notis pings you in chat with one-tap approve.
Self-healing
When an API changes shape, Notis adapts the parser. Less midnight fire-fighting.
Related pairs
More ways to connect Notion and Abuselpdb
Connect any two apps with Notis in the middle.
Notion and Abuselpdb, or any other combination from 1,500+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with $20 of usage included.
No card. Works with personal or business Abuselpdb.