Skip to content
Notis

Use fresh abuse reports to review an existing rule

Notis can check the report history for the IPs you specify, then update a known rule when your conditions are met.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Update Rule in Ruleset

Updates or reorders a rule in a ruleset.

Why this helps

Existing firewall rules can outlive the evidence that justified them, leaving teams unsure when a change is warranted.

  • Use recent report history as an input to rule review.
  • Change only a rule whose ID and ruleset you provide.
  • Get a run report explaining which criteria were met.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and Cloudflare api key once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and name it.
  • 3Specify the IPs to review, the report criteria, the ruleset and rule IDs, and the exact update to apply when criteria are met.
  • 4Pick the recurring schedule trigger and choose where run reports go.
  • 5Test with one real example and inspect the updated rule.

Questions about this workflow

Can the automation select a rule by itself?

Provide the ruleset and rule IDs and the intended update. The action updates a specific rule, so Notis should not guess which one to change.

What does Abuselpdb contribute?

Notis can use the abuse report history for the IPs you specify as context for the conditions in your instruction.

Can I set this to run weekly?

Yes. Select the recurring schedule trigger and choose the cadence that fits your review process.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to Cloudflare api key. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

Cloudflare api key actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create DNS Record

Creates a DNS record in a zone.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Create Zone Lockdown Rule

Creates a rule to restrict access to URL patterns to specified IP addresses.

ActionInstant

Create Rule in Ruleset

Adds a rule to an existing ruleset.

ActionInstant

Create Ruleset

Creates a ruleset to control traffic behavior.

ActionInstant

Delete DNS Record

Deletes a DNS record from a zone.

ActionInstant

Delete DNSSEC

Deletes DNSSEC records for a zone.

ActionInstant

Delete Rule from Ruleset

Deletes a specific rule from an account or zone ruleset.

ActionInstant

Delete Ruleset

Deletes all versions of a ruleset from an account or zone.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and Cloudflare api key, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare api key.