Monitor Domains & IPs on AbuseIPDB Blacklist with Slack Alerts - n8n Workflow | Neura Market
Monitor Domains & IPs on AbuseIPDB Blacklist with Slack Alerts
Automatically scans domains and IPs against AbuseIPDB blacklist on a schedule, sending Slack alerts for new listings to enable proactive security response.
This n8n workflow automates monitoring of specified domains and IP addresses against the AbuseIPDB blacklist, ensuring early detection of potential security threats. It runs on a configurable schedule (e.g., every 30 minutes), queries the AbuseIPDB API for each asset, evaluates the response for listings, and triggers immediate Slack notifications if a new blacklist entry is found. Status updates are logged for historical tracking.
The process begins with a cron trigger initiating periodic check
Platform
n8n
Category
Social Media
Price
$14.99
Creator
Jose Maurino
security
monitoring
blacklist
AbuseIPDB
Slack
alerts
domains
IPs
automation
IT
How to import this workflow into n8n
1Purchase or download the workflow to get the n8n workflow JSON file.
2In your n8n instance, open Workflows and choose "Import from File" (or paste the JSON with Ctrl+V on the canvas).
3Open each node marked with a credential warning and connect your own accounts and API keys.
4Run the workflow once manually to verify the data flow, then toggle it to Active.