Skip to content
Notis

Get Cloudflare Zone Context for an Abuse IP Report

See reputation findings and your relevant Cloudflare zone inventory in one run report.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

List Zones

Lists the DNS zones in the authenticated account.

Why this helps

When an IP report arrives, finding the right Cloudflare zone and gathering threat context can take several separate searches.

  • Checks the submitted IP's reputation and available abuse reports with Abuselpdb.
  • Searches Cloudflare zones using the zone details supplied in the instruction.
  • Puts the returned context in one report without implying that a zone is linked to the IP.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and Cloudflare once in the Notis portal.
  • 2Create an automation and describe checking the submitted IP and retrieving Cloudflare zone context for investigation.
  • 3Choose the webhook trigger and have your sender post the IP plus a zone search term or domain.
  • 4Choose where run reports should go, then test with one real example.
  • 5Review the returned information and identify any Cloudflare investigation that should follow.

Questions about this workflow

Will the workflow identify which zone owns the submitted IP?

Not from these actions alone. It can retrieve zones and IP reputation details, but it cannot establish a relationship between them without information you supply.

Does it change Cloudflare settings?

No. The zone action lists and searches zones; it does not modify them.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to Cloudflare. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

Cloudflare actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create DNS record

Create a DNS record that makes live changes to a zone.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Capture Browser Snapshot

Renders a URL or supplied HTML and returns selected page representations.

ActionInstant

Create WAF List

Create an empty custom list for WAF rules and filters.

ActionInstant

Check Registrar Domains

Checks authoritative domain registration availability and pricing for up to 20 domains.

ActionInstant

Create Zone

Create a DNS zone for a domain.

ActionInstant

Create Alert Policy

Creates an account-level notification policy.

ActionInstant

Delete DNS Record

Delete a DNS record immediately; this action is irreversible.

ActionInstant

Delete WAF List

Delete a WAF list.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and Cloudflare, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare.