Automated Shodan Query for Network Security Monitoring

• Monitor open ports on critical infrastructure to prevent unauthorized access.
• Automate security audits by regularly checking for unexpected services.
• Integrate findings into incident response systems for timely alerts.

Fetch a list of monitored IPs and their ports from a designated source. Iterate through each IP address to perform a service scan using Shodan. Filter results to identify any unexpected open ports. Format the findings into a Markdown table for clarity. Post alerts to TheHive for incident management.

1. 1
   Import the workflow template into your automation platform.
2. 2
   Configure the source for monitored IPs and ports.
3. 3
   Set up Shodan credentials for API access.
4. 4
   Adjust any necessary parameters for the Markdown formatting.
5. 5
   Schedule the workflow to run at desired intervals.