Skip to content
FlowHubFluxonLab
HTML
HTMLfree

Weekly Shodan Query - Report Accidents

by n8n Teamadapted from n8n official workflow galleryUpdated Aug 2026
RequiresHTMLHTMLHTTP RequestHTTP RequestTheHiveTheHive
Share Post Share
HRScan each IPHRGet watched IPs & PortsGet watched IPs…ILSplit out servicesSplit out servi…FiUnexpected port?SeSet data to post for each portSet data to pos…HtConvert to tableMaConvert to MarkdownConvert to Mark…SIFor each IPScEvery MondayTHCreate TheHive alertCreate TheHive …12345678910
1/5
STEPS · 10
Runs on a schedule

This n8n workflow, which runs every Monday at 5:00 AM, initiates a comprehensive process to monitor and analyze network security by scrutinizing IP addresses and their associated ports. It begins by fetching a list of watched IP addresses and expected ports through an HTTP request. Each IP address is then processed in a sequential loop. For every IP, the workflow sends a GET request to Shodan, a renowned search engine for internet-connected devices, to gather detailed information about the IP. It then extracts the data field from Shodan's response, converting it into an array. This array contains information on all ports Shodan has data for regarding the IP. A filter node compares the ports returned from Shodan with the expected list obtained initially. If a port doesn't match the expected list, it is retained for further processing; otherwise, it's filtered out. For each such unexpected port, the workflow assembles data including the IP, hostnames from Shodan, the unexpected port number, service description, and detailed data from Shodan like HTTP status code, date, time, and headers.

Tags

n8nreference-onlyhtmlthe-hive
Connects
htmlHTMLWHTTP RequestthehiveTheHive
CategoryHTML
Triggermanual
Complexitycomplex
Nodes10
AddedNov 13, 2023

Related workflows

See all HTML
ChtmlW
free

Authenticate a user in a workflow with openid connect

Intro This workflow needs a user to authenticate by using an openid connect provider in order to call the webhook. If the user is not authenticated, it starts a login process by using an Authorization Code with PKCE https://datatracker.ietf.org/doc/html/rfc7636, a standard way to authenticate users with openid connect. Then, after the user logs in, the webhook is refreshed and gets the user's token from a cookie. With this token, all details about the user are requested through the userinfo endpoint on the identity provider. How to set up with Keycloak Keycloak Keycloak is an open source identity and access management solution. Feel free to get a demo realm at https://please-open.it or get your own Keycloak server up and running. After creating a realm, go to "Realm Settings" and click on "OpenID Endpoint Configuration" Retrieve authorization_endpoint, token_endpoint and userinfo_endpoint values. Set those variables in the "Set variables" node. In Keycloak, create a new client (name it as you want) Disable the client authentication, check only "standard flow" : At the third step, put the webhook url in "valid redirect URIs", fill "Web origins" with a "+". You're done, open the webh

by please-open.it
htmlW
free

🎨 Interactive Image Editor with FLUX.1 Fill Tool for Inpainting

> Like this template? Connect with Eduard via LinkedIn. This workflow is a prototype of an AI-powered image editing interface, similar to Photoshop's Generative Fill feature, but running entirely in the browser. It provides a web-based editor that allows users to: Select areas in images using an adjustable brush tool Input text prompts to guide the AI generation Compare original and generated images side by side Iterate on edits with different prompts and settings Save or reuse generated images > 🎨 Perfect for product catalog management, seasonal content updates, and creative image editing tasks! 📋 Requirements FLUX API Access: You'll need API credentials from FLUX to use this workflow. Configure the HTTP Header Auth credential in n8n with your FLUX API key 🔧 Key Components FLUX Fill API for AI-powered image generation Konva.js for canvas manipulation img-comparison-slider for result visualization Custom CSS/JS for editor functionality Simple Editor Interface HTML page with an editor is served on the Webhook call Adjustable brush selection tool Provides several mock examples and allows uploading custom images Basic prompt and FLUX model parameter controls Image Processing

by Eduard
ChtmlW
free

Extract And Decode Google News RSS URLs to Clean Article Links

The workflow performs tasks that would normally require human intervention on Google News links, transforming the RSS feeds into data that can be used by an automated system like n8n, thus creating a solid foundation for further applications Who is this for? This workflow is ideal for developers, journalists, and content aggregators who need to extract and clean Google News URLs from its RSS feed. What problem does this workflow solve? Google News RSS provides encoded URLs that contain additional tracking parameters. This workflow decodes those URLs and provides clean, direct links to news articles, making them easier to process, share, and analyze. What this workflow does Fetch Google News RSS – Retrieves news articles from Google News based on predefined parameters (language, country). Limit results – Reduces the number of requests to avoid excessive API usage. Extract encoded content – Retrieves the encoded news URLs. Decode the URLs – Uses a decoding mechanism to extract clean links. Remove unwanted characters – Cleans up the decoded URLs to ensure they are properly formatted. Aggregate results – Outputs a final list of clean, readable URLs. Setup Modify RSS parameters (hl, gl)

by Miko