Library / Security & Compliance
Security & Compliance
Weekly Shodan Scan Reports Unexpected Open Ports to TheHive
Every week, it scans watched IPs with Shodan, finds services on unexpected ports and creates alerts in TheHive.
What it does
# Weekly_Shodan_Query_Report_Accidentsno_function_node_ ## Overview Automated workflow: Weekly_Shodan_Query_Report_Accidentsno_function_node_. This workflow integrates 11 different services: itemLists, httpRequest, filter, markdown, stickyNote. It contains 19 nodes and follows best practices for error handling and security. ## Workflow Details - Total Nodes: 19 - Node Types: 11 - Error Handling: ✅ Implemented - Security: ✅ Hardened (no sensitive data) - Documentation: ✅ Complete ## Node Breakdown - Scan each IP: httpRequest - Get watched IPs & Ports: httpRequest - Split out services: itemLists - Unexpected port?: filter - Set data to post for each port: set - Convert to table: html - Convert to Markdown: markdown - For each IP: splitInBatches - Sticky Note: stickyNote - Sticky Note1: stickyNote - ... and 9 more nodes ## Usage Instructions 1. Configure Credentials: Set up all required API keys and credentials 2. Update Variables: Replace any placeholder values with actual data 3. Test Workflow: Run in test mode to verify functionality 4. Deploy: Activate the workflow for production use ## Security Notes - All sensitive data has been removed or replaced with placeholders - Error handling is implemented for reliability - Follow security best practices when configuring credentials ## Troubleshooting - Check error logs if workflow fails - Verify all credentials are properly configured - Ensure all required services are accessible
The steps
- Scan each IP
- Get watched IPs & Ports
- Split out services
- Unexpected port?
- Set data to post for each port
- Convert to table
- Convert to Markdown
- For each IP
- Every Monday
- Create TheHive alert
- Error Handler
- Stopanderror 1
- Error Handler for 54b2b2bd
- Error Handler for f6b194a7
29 steps in total.
Similar automations
Security & ComplianceWeekly Shodan Scan Reports Unexpected Ports to TheHive10 stepsSecurity & ComplianceRun Weekly Shodan Queries and Report Exposed Services to TheHive10 stepsSecurity & ComplianceCreate, Update and Get a Case in TheHive5 stepsSecurity & ComplianceSend TheHive Alerts to SIGNL4 and Resolve Them8 steps