Skip to content
Notis

Keep Cloudflare rules current with abuse intelligence

Have Notis check the threat intelligence you specify on a schedule and add qualifying IPs to a Cloudflare ruleset you identify.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Create Rule in Ruleset

Adds a rule to an existing ruleset.

Why this helps

Threat intelligence changes over time, and manually revisiting it competes with higher-priority security work.

  • Review threat intelligence on a cadence you choose.
  • Apply only addresses that meet your explicit criteria.
  • Receive a run report showing what was considered and changed.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and Cloudflare api key once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and name it.
  • 3In one instruction, specify the Abuselpdb intelligence to check, the qualification criteria, and the existing Cloudflare ruleset to update.
  • 4Pick the recurring schedule trigger and choose where run reports go.
  • 5Test with one real example and review the resulting rule.

Questions about this workflow

Can I choose how often it runs?

Yes. Choose the recurring schedule when setting up the Notis cron trigger.

Can Notis decide which threat data is important?

Give the automation the source data and criteria to use, such as reputation threshold or age cutoff. It should not assume a baseline you have not specified.

Does this create a new ruleset?

This workflow adds a rule to an existing ruleset. Specify its ID and scope; creating a ruleset is a separate Cloudflare action.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to Cloudflare api key. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

Cloudflare api key actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create DNS Record

Creates a DNS record in a zone.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Create Zone Lockdown Rule

Creates a rule to restrict access to URL patterns to specified IP addresses.

ActionInstant

Create Rule in Ruleset

Adds a rule to an existing ruleset.

ActionInstant

Create Ruleset

Creates a ruleset to control traffic behavior.

ActionInstant

Delete DNS Record

Deletes a DNS record from a zone.

ActionInstant

Delete DNSSEC

Deletes DNSSEC records for a zone.

ActionInstant

Delete Rule from Ruleset

Deletes a specific rule from an account or zone ruleset.

ActionInstant

Delete Ruleset

Deletes all versions of a ruleset from an account or zone.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and Cloudflare api key, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare api key.