Skip to content
Notis

Turn verified abuse reports into Cloudflare rules

Send an IP or batch of IPs to Notis. It checks Abuselpdb and adds confirmed matches to the Cloudflare ruleset you specify.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Create Rule in Ruleset

Adds a rule to an existing ruleset.

Why this helps

Security findings can sit in logs while someone has to verify each address and update firewall rules by hand.

  • Check incoming IPs against abuse reputation data before acting.
  • Add only matches that meet your stated confidence threshold.
  • Keep the ruleset and scope under your control.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and Cloudflare api key once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and name it.
  • 3Tell Notis to check webhook IPs with Abuselpdb and add confirmed abusive matches to the named existing ruleset, stating the confidence threshold and ruleset scope.
  • 4Pick the webhook trigger and choose where run reports go.
  • 5Test with one real example and review the proposed rule result.

Questions about this workflow

Does Abuselpdb start this automation?

No. Abuselpdb exposes no trigger events here. An HTTP request starts this automation, and Notis then checks the submitted IPs with Abuselpdb.

What does the workflow need to add a rule?

Provide the Cloudflare ruleset scope and ID, plus the conditions for treating an IP as a confirmed match. Notis should not guess these details.

Will every submitted IP be blocked?

The instruction can require an Abuselpdb match and a specified confidence threshold before creating a rule. Review the report and rule outcome.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to Cloudflare api key. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

Cloudflare api key actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create DNS Record

Creates a DNS record in a zone.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Create Zone Lockdown Rule

Creates a rule to restrict access to URL patterns to specified IP addresses.

ActionInstant

Create Rule in Ruleset

Adds a rule to an existing ruleset.

ActionInstant

Create Ruleset

Creates a ruleset to control traffic behavior.

ActionInstant

Delete DNS Record

Deletes a DNS record from a zone.

ActionInstant

Delete DNSSEC

Deletes DNSSEC records for a zone.

ActionInstant

Delete Rule from Ruleset

Deletes a specific rule from an account or zone ruleset.

ActionInstant

Delete Ruleset

Deletes all versions of a ruleset from an account or zone.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and Cloudflare api key, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare api key.