Refresh the threat blacklist after usage changes
Turn usage reporting into a lightweight threat intelligence refresh.
Trigger
Daily Usage Report Changed
Triggers when the Zoom daily usage report changes for a selected year/month. This trigger monitors daily usage statistics including: - New users added - Number of meetings held - Participant counts - Meeting minutes consumed
Action
Retrieve IP Blacklist
Tool to retrieve a list of the most reported ip addresses. use when building dynamic blocklists or threat intelligence feeds.
Why this helps
Blacklist reviews are easy to postpone when usage data changes every day.
- Keeps a current blacklist snapshot
- Connects operational activity to security review
- Reduces manual intelligence pulls
Setup
Build it in a few focused steps.
- 1Connect Zoom and Abuselpdb in Notis once.
- 2Create an automation that retrieves the most reported IP addresses when the usage report changes.
- 3Pick the Zoom Daily Usage Report Changed trigger.
- 4Choose where run reports should go.
- 5Test with one usage report update.
Questions about this workflow
Can I limit the report to a month?
Yes, the Zoom trigger is selected for a year and month, and your prompt can define the review scope.
Does this block addresses?
No. It retrieves blacklist intelligence for your review.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Zoom to Abuselpdb. A trigger fires from one place; an action lands in another.
Zoom triggers
Abuselpdb actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Retrieve IP Blacklist
Tool to retrieve a list of the most reported ip addresses. use when building dynamic blocklists or threat intelligence feeds.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Bulk Report
Tool to submit multiple ip abuse reports in bulk. use when you need to report a large set of ips at once by uploading a csv file with required headers. csv must include columns: ip, categories, reportdate, comment.
Daily Usage Report Changed
Triggers when the Zoom daily usage report changes for a selected year/month. This trigger monitors daily usage statistics including: - New users added - Number of meetings held - Participant counts - Meeting minutes consumed
Check Block
Tool to check the reputation of all ip addresses in a cidr range. use when you need aggregated abuse data for a network block.
Meeting Details Changed
Triggers when a specific meeting's details change. Detects changes such as: - Meeting topic changes - Agenda updates - Schedule changes (timezone, duration) - Settings modifications (waiting room, recording, video, etc.) - Password changes - Recurrence pattern updates
Check IP Reputation
Tool to check the reputation of an ip address. use when you need to determine if an ip address has been reported for abusive activity within a specified look-back period. example: checkip(ipaddress='8.8.8.8', maxageindays=90).
Meeting Recording Changed
Triggers when a specific meeting's cloud recordings change. Detects changes such as: - New recording files appearing - Recording processing completion (status changes) - Recording metadata changes (count, size, etc.) - New participant audio files
Clear Address Reports
Tool to remove all reports associated with a specific ip address. use when you need to purge your own abuse records after verifying control of the ip.
Meeting Summary Created or Updated
Triggers when a meeting summary is created or updated for a specific meeting. IMPORTANT: This trigger requires a PAID Zoom account (Pro, Business, or Enterprise plan). Free Zoom accounts cannot use this feature. Additionally requires: - AI Companion feature enabled in account settings - Meeting must not be end-to-end encrypted (E2EE) - Meeting summary must be enabled and generated for the meeting
Get Abuse Reports
Tool to retrieve a list of abuse reports for a specific ip address. use when you need to fetch historic reports with optional filtering by status, date range, reporter, and pagination.
New Cloud Recording
Triggers when a new cloud recording meeting instance appears for a user.
New Meeting Created
Triggers when a new Zoom meeting is created for a user.
Connect any two apps with Notis in the middle.
Zoom and Abuselpdb, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Abuselpdb.