Skip to content
NEWMarketplace and the trig8n Agent: sell what you build, and get plans and changes that are tested before you see them. See what is new

Library / Security & Compliance

Security & Compliance

Weekly Shodan Scan Reports Unexpected Open Ports to TheHive

Every week, it scans watched IPs with Shodan, finds services on unexpected ports and creates alerts in TheHive.

What it does

# Weekly_Shodan_Query_Report_Accidentsno_function_node_ ## Overview Automated workflow: Weekly_Shodan_Query_Report_Accidentsno_function_node_. This workflow integrates 11 different services: itemLists, httpRequest, filter, markdown, stickyNote. It contains 19 nodes and follows best practices for error handling and security. ## Workflow Details - Total Nodes: 19 - Node Types: 11 - Error Handling: ✅ Implemented - Security: ✅ Hardened (no sensitive data) - Documentation: ✅ Complete ## Node Breakdown - Scan each IP: httpRequest - Get watched IPs & Ports: httpRequest - Split out services: itemLists - Unexpected port?: filter - Set data to post for each port: set - Convert to table: html - Convert to Markdown: markdown - For each IP: splitInBatches - Sticky Note: stickyNote - Sticky Note1: stickyNote - ... and 9 more nodes ## Usage Instructions 1. Configure Credentials: Set up all required API keys and credentials 2. Update Variables: Replace any placeholder values with actual data 3. Test Workflow: Run in test mode to verify functionality 4. Deploy: Activate the workflow for production use ## Security Notes - All sensitive data has been removed or replaced with placeholders - Error handling is implemented for reliability - Follow security best practices when configuring credentials ## Troubleshooting - Check error logs if workflow fails - Verify all credentials are properly configured - Ensure all required services are accessible

The steps

  1. Scan each IP
  2. Get watched IPs & Ports
  3. Split out services
  4. Unexpected port?
  5. Set data to post for each port
  6. Convert to table
  7. Convert to Markdown
  8. For each IP
  9. Every Monday
  10. Create TheHive alert
  11. Error Handler
  12. Stopanderror 1
  13. Error Handler for 54b2b2bd
  14. Error Handler for f6b194a7

29 steps in total.

Similar automations