Skip to content
Notis

Turn an Abuse IP Report into a Cloudflare Review List

Get a named place ready for a human to review suspicious IPs, with Abuselpdb context close at hand.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Create WAF List

Create an empty custom list for WAF rules and filters.

Why this helps

Abuse reports can get lost between threat research and Cloudflare, while creating a review list adds another manual step.

  • Checks reputation and available abuse report history for the submitted IP.
  • Creates an empty Cloudflare WAF list after confirming the account.
  • Shares the findings and list details in the run report for human review.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and Cloudflare once in the Notis portal.
  • 2Create an automation and describe checking the submitted IP, then preparing an empty review list with a clear name.
  • 3Choose the webhook trigger and have your sender post the IP and the confirmed Cloudflare account ID.
  • 4Choose where run reports should go, then test with one real IP report.
  • 5Review the Abuselpdb findings and populate the list through your approved Cloudflare process.

Questions about this workflow

Does this workflow add the IP to the WAF list?

No. The available Cloudflare action creates an empty list. Review the findings and add entries through your approved Cloudflare process.

How does the automation start?

An external system sends an HTTP request to the workflow's Notis webhook. Abuselpdb does not provide a trigger event here.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to Cloudflare. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

Cloudflare actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create DNS record

Create a DNS record that makes live changes to a zone.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Capture Browser Snapshot

Renders a URL or supplied HTML and returns selected page representations.

ActionInstant

Create WAF List

Create an empty custom list for WAF rules and filters.

ActionInstant

Check Registrar Domains

Checks authoritative domain registration availability and pricing for up to 20 domains.

ActionInstant

Create Zone

Create a DNS zone for a domain.

ActionInstant

Create Alert Policy

Creates an account-level notification policy.

ActionInstant

Delete DNS Record

Delete a DNS record immediately; this action is irreversible.

ActionInstant

Delete WAF List

Delete a WAF list.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and Cloudflare, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare.