Skip to content
Notis

Review Abuse IP Context Alongside Cloudflare WAF Lists

Bring recent reputation context and your Cloudflare list inventory into one scheduled report.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

List WAF Lists

Lists the WAF lists in an account.

Why this helps

Threat review and Cloudflare list maintenance happen in separate places, making it easy to miss a follow-up.

  • Checks the user-supplied IPs with Abuselpdb for reputation and available report history.
  • Retrieves Cloudflare WAF list metadata for the confirmed account.
  • Summarizes relevant findings for a person to review; it does not change list entries.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and Cloudflare once in the Notis portal.
  • 2Create an automation and describe checking your supplied IP set and retrieving WAF list metadata for a review report.
  • 3Choose the recurring schedule trigger and specify the IPs and confirmed Cloudflare account ID in your instruction.
  • 4Choose where run reports should go, then test with one real example.
  • 5Review the report and decide whether any Cloudflare list needs a separate update.

Questions about this workflow

Does Cloudflare return the entries in each WAF list?

This action returns list metadata without items. The report cannot verify whether a particular IP is already in a list.

Can the workflow add or remove list entries?

No. The available list action retrieves WAF lists only. Use your approved Cloudflare process to change entries.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to Cloudflare. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

Cloudflare actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create DNS record

Create a DNS record that makes live changes to a zone.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Capture Browser Snapshot

Renders a URL or supplied HTML and returns selected page representations.

ActionInstant

Create WAF List

Create an empty custom list for WAF rules and filters.

ActionInstant

Check Registrar Domains

Checks authoritative domain registration availability and pricing for up to 20 domains.

ActionInstant

Create Zone

Create a DNS zone for a domain.

ActionInstant

Create Alert Policy

Creates an account-level notification policy.

ActionInstant

Delete DNS Record

Delete a DNS record immediately; this action is irreversible.

ActionInstant

Delete WAF List

Delete a WAF list.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and Cloudflare, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare.