Weekly Shodan Query - Report Accidents

n8n template #1977

Summary

This n8n workflow, which runs every Monday at 5:00 AM, initiates a comprehensive process to monitor and analyze network security by scrutinizing IP addresses and their associated ports. It begins by fetching a list of watched IP addresses and expected ports through an HTTP request. Each IP address is then processed in a sequential loop. For every IP, the workflow sends a GET request to Shodan, a renowned search engine for internet-connected devices, to gather detailed information about the IP. It then extracts the data field from Shodan's response, converting it into an array. This array contains information on all ports Shodan has data for regarding the IP. A filter node compares the ports

How to set it up

Open template #1977 on n8n.io and click Use for free, or copy the template JSON and paste it onto an empty canvas in n8n.
Create a credential under Credentials → Add credential: TheHive. Then open each of those nodes and pick the credential.
Click Execute workflow and step through each node's output to confirm the data looks right.
Toggle the workflow to Active so its trigger runs on its own.

Hand off to your agent

Prompt

Help me set up the n8n workflow "Weekly Shodan Query - Report Accidents" (https://n8n.io/workflows/1977). It uses: HTTP Request, TheHive, HTML. Import the template JSON into my n8n instance, list every credential I need to create, and walk me through testing it.

Paste into Claude Code and it will do the rest.

Apps and nodes

HTTP RequestTheHiveHTML

Questions

Yes. n8n Team published it free on n8n.io as a verified creator, and it has 5,359 views. It runs on n8n Cloud or a self-hosted n8n instance.

TheHive. The other 2 nodes are built into n8n.

Similar workflows

NameViews