Saltar al contenido

Monitoreo Semanal de Puertos Abiertos Inesperados con Shodan y Alerta en TheHive

Workflow programado semanalmente que obtiene IPs para monitorear, consulta Shodan en busca de puertos abiertos inesperados, formatea los hallazgos en Markdown y crea alertas en la plataforma TheHive.

🛠️ In progressSecops 15 nodos 10 tipos conectado
Cargando workflow...

Nodos

HttpRequest ItemLists Filter Set Html Markdown SplitInBatches StickyNote ScheduleTrigger TheHive

Herramientas

Shodan TheHive HTTP Request

Detalles

ID
1977
Nodos
15
Conex.
Sí
Tipos
10

Pertenece a:

IT & DevOps shodan thehive http-request

¿Qué hace este workflow?

Este workflow automatiza la vigilancia de la infraestructura de TI, ejecutándose semanalmente para consultar Shodan y detectar la exposición de puertos inesperados en una lista de direcciones IP predefinida. Transforma los datos crudos de Shodan en un formato Markdown legible, lo que facilita la revisión rápida de los hallazgos. Posteriormente, integra esta información directamente en TheHive, creando alertas detalladas para que los equipos de seguridad puedan investigar y responder proactivamente a posibles vulnerabilidades. Implementar este sistema reduce significativamente el riesgo de accesos no autorizados y ataques cibernéticos al identificar brechas de seguridad antes de que puedan ser explotadas. Permite a las organizaciones mantener un control constante sobre su superficie de ataque externa, ahorrando horas de trabajo manual en escaneos y reportes, y asegurando una respuesta ágil ante cualquier desviación de la política de seguridad.

¿Cómo funciona?

Este workflow usa 15 nodos conectados con 10 tipos diferentes: HttpRequest, ItemLists, Filter, Set, Html y 5 más. La estructura está totalmente conectada — listo para importar.

¿Para quién es?

Diseñado para equipos de IT & DevOps. Nivel intermedio — necesitas familiaridad con n8n. Alto valor de negocio: automatiza una tarea recurrente con impacto directo.

¿Lo quieres en tu empresa?

→

Lo implementamos por ti end-to-end: integración, deploy, mantenimiento y soporte. Consultoría B2B con Genai Sapiens.

Hablemos de tu proyecto

¿Quieres aprender a hacerlo?

→

Sprints de 30 días con companion IA + comunidad. Aprende n8n, automatización y agentes IA desde cero o nivel avanzado.

Ver formación Momentum

Workflows similares

Automatiza Gestión de Incidentes con TheHive y Slack

avanzado ★ Alto

Automatiza la gestión integral de casos de seguridad en TheHive

basico ★ Alto

Detección Proactiva: Automatiza Alertas de Puertos Abiertos con Shodan y TheHive

intermedio ★ Alto

Gestión Avanzada de Reintentos HTTP: Haz tus integraciones infalibles

intermedio

Automatiza Notificaciones de Eventos de TheHive para Respuesta Rápida

intermedio

Monitoriza la Disponibilidad de URLs Críticas con n8n Automáticamente

intermedio

Recupera Datos Binarios de Nodos Anteriores en n8n

intermedio
\n\n\n\n\n
\n
Please enable cookies.
\n
\n
\n

\n Error\n 1003\n

\n Ray ID: 80060379ef7009ef •\n 2023-09-02 13:14:00 UTC\n

Direct IP access not allowed

\n
\n\n
\n
\n

What happened?

\n

You've requested an IP address that is part of the Cloudflare network. A valid Host header must be supplied to reach the desired website.

\n \n
\n\n \n
\n

What can I do?

\n

If you are interested in learning more about Cloudflare, please visit our website.

\n
\n \n
\n\n
\n
\n Was this page helpful?\n \n \n
\n
\n Thank you for your feedback!\n
\n
\n\n\n
\n

\n Cloudflare Ray ID: 80060379ef7009ef\n •\n \n Performance & security by Cloudflare\n \n

\n \n
\n\n\n
\n
\n\n \n\n\n\n","title":"Direct IP access not allowed | Cloudflare","robots":null,"server":"cloudflare","status":403,"sitemap":null,"location":"/","html_hash":-1841956297,"redirects":[],"components":{},"robots_hash":null,"securitytxt":null,"headers_hash":144737606,"sitemap_hash":null,"securitytxt_hash":null},"opts":{},"port":80,"tags":["cdn"],"ip_str":"188.114.96.9","_shodan":{"id":"5447d0c1-4151-4f22-a542-17adadb88fd5","ptr":true,"module":"http","region":"na","crawler":"49217c0cdcbcebaf23c2979ae16d4eba64180b1f","options":{}},"domains":[],"product":"CloudFlare","location":{"city":"San Francisco","latitude":37.7621,"area_code":null,"longitude":-122.3971,"region_code":"CA","country_code":"US","country_name":"United States"},"hostnames":[],"timestamp":"2023-09-02T13:14:00.635115","transport":"tcp"},{"ip":3161612297,"os":null,"asn":"AS13335","isp":"Cloudflare, Inc.","org":"CloudFlare, Inc.","ssl":{"alpn":[],"cert":{"issued":"20230703000000Z","issuer":{"C":"US","O":"Cloudflare, Inc.","CN":"Cloudflare Inc ECC CA-3"},"pubkey":{"bits":256,"type":"dsa"},"serial":2.0515453915550058e+37,"expired":false,"expires":"20240702235959Z","sig_alg":"ecdsa-with-SHA256","subject":{"C":"US","L":"San Francisco","O":"Cloudflare, Inc.","CN":"sni.cloudflaressl.com","ST":"California"},"version":2,"extensions":[{"data":"0\\x16\\x80\\x14\\xa5\\xce7\\xea\\xeb\\xb0u\\x0e\\x94g\\x88\\xb4E\\xfa\\xd9$\\x10\\x87\\x96\\x1f","name":"authorityKeyIdentifier"},{"data":"\\x04\\x14nS\\x87\\x04\\' \\x03\\x07\\x1d\\tIp\\xf3\\x1f(\\xb0C*\\xc6\\x1d","name":"subjectKeyIdentifier"},{"data":"0E\\x82\\x16*.cdnjs.cloudflare.com\\x82\\x14cdnjs.cloudflare.com\\x82\\x15sni.cloudflaressl.com","name":"subjectAltName"},{"data":"\\x03\\x02\\x07\\x80","name":"keyUsage","critical":true},{"data":"0\\x14\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02","name":"extendedKeyUsage"},{"data":"0r07\\xa05\\xa03\\x861http://crl3.digicert.com/CloudflareIncECCCA-3.crl07\\xa05\\xa03\\x861http://crl4.digicert.com/CloudflareIncECCCA-3.crl","name":"crlDistributionPoints"},{"data":"0503\\x06\\x06g\\x81\\x0c\\x01\\x02\\x020)0\\'\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x02\\x01\\x16\\x1bhttp://www.digicert.com/CPS","name":"certificatePolicies"},{"data":"0h0$\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x01\\x86\\x18http://ocsp.digicert.com0@\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x864http://cacerts.digicert.com/CloudflareIncECCCA-3.crt","name":"authorityInfoAccess"},{"data":"0\\x00","name":"basicConstraints","critical":true},{"data":"\\x04\\x82\\x01j\\x01h\\x00u\\x00v\\xff\\x88?\\n\\xb6\\xfb\\x95Q\\xc2a\\xcc\\xf5\\x87\\xba4\\xb4\\xa4\\xcd\\xbb)\\xdchB\\n\\x9f\\xe6gLZ:t\\x00\\x00\\x01\\x89\\x19\\x8cog\\x00\\x00\\x04\\x03\\x00F0D\\x02 \\x11\\xd8.\\xb2l\\xc9\\xc4\\xb3A\\xa7\\xbc\\x87!EP\\xe3{\\x01\\x86j\\x0cA\\x82V\\xc2\\x1b\\xa9M$\\x8c\\x84\\x02\\x02 k\\x8f\\xb7\\x10\\xae\\xa0#\\x97\\x8cY\\xb1\\x07k]e.M\\xb7\\xef\\x86L\\x98.\\xc6?\\xd4\\xf5`-TN\\x06\\x00v\\x00\\xda\\xb6\\xbfk?\\xb5\\xb6\"\\x9f\\x9b\\xc2\\xbb\\\\k\\xe8p\\x91ql\\xbbQ\\x84\\x854\\xbd\\xa4=0H\\xd7\\xfb\\xab\\x00\\x00\\x01\\x89\\x19\\x8co\\\\\\x00\\x00\\x04\\x03\\x00G0E\\x02!\\x00\\xf5+\\x0b\\t\\xf7\\xe7\\x88\\x96\\x1c\\x1a\\xe5\\x83\\xb3\\xb6\\xc1z\\\\^\\xa0\\xa4\\xe5Sj\\xd3\\xc6\\xcb\\xe7\\xfbR\\rbY\\x02 \\x13\\xaf\\xac\\x90\\x82\\x85\\x9ex\\xe2r\\x13\\x12o\\xb2\\xb9\\x18\\xf2E/\\x9eA\\xd8C\"\\xfd\\x8b\\xed\\x04c`\\xc4\\xc1\\x00w\\x00;Swu>-\\xb9\\x80N\\x8b0[\\x06\\xfe@;g\\xd8O\\xc3\\xf4\\xc7\\xbd\\x00\\r-ro\\xe1\\xfa\\xd4\\x17\\x00\\x00\\x01\\x89\\x19\\x8co\\x95\\x00\\x00\\x04\\x03\\x00H0F\\x02!\\x00\\x81\\xa0\\xc71ra\\xa8\\xb0\\x82\\xbf/\\x0e\\xaeL\\xfe\\xba\\x9b\\x80\\xea\\xd2S\\x80@;\\xe8\\x858\\x1f\\xed\\xd6\\xaa\\xc2\\x02!\\x00\\xe0\\xca\\x8aT\\x95\\xdf\\xb9\\xdc\\xf1\\nS~^\\xb1\\x02\"\\xc4\\xa5\\x95\\xa2\\x11\\xd4\\xf8J\\x00aAL\r\n403 Forbidden\r\n\r\n

403 Forbidden

\r\n
cloudflare
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n","title":"403 Forbidden","robots":null,"server":"cloudflare","status":403,"sitemap":null,"location":"/","html_hash":1471629837,"redirects":[],"components":{},"robots_hash":null,"securitytxt":null,"headers_hash":-2088197660,"sitemap_hash":null,"securitytxt_hash":null},"opts":{"vulns":[],"heartbleed":"2023/08/26 19:21:54 188.114.96.9:443 - SAFE\n"},"port":443,"tags":["cdn"],"ip_str":"188.114.96.9","_shodan":{"id":"69515b9b-4cbc-46a3-9d87-5b8f667a7c3a","ptr":true,"module":"https","region":"eu","crawler":"f84746de6c89bcf60f34a5f0aee149448facfc91","options":{}},"domains":["cloudflare.com","cloudflaressl.com"],"product":"CloudFlare","location":{"city":"San Francisco","latitude":37.7621,"area_code":null,"longitude":-122.3971,"region_code":"CA","country_code":"US","country_name":"United States"},"hostnames":["cdnjs.cloudflare.com","sni.cloudflaressl.com"],"timestamp":"2023-08-26T19:21:35.776635","transport":"tcp"},{"ip":3161612297,"os":null,"asn":"AS13335","isp":"Cloudflare, Inc.","org":"CloudFlare, Inc.","data":"HTTP/1.1 400 Bad Request\r\nServer: cloudflare\r\nDate: Thu, 17 Aug 2023 17:36:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 655\r\nConnection: close\r\nCF-RAY: -\r\n\r\n","hash":1752897737,"http":{"waf":"Cloudflare (Cloudflare Inc.)","host":"188.114.96.9","html":"\r\n400 The plain HTTP request was sent to HTTPS port\r\n\r\n

400 Bad Request

\r\n
The plain HTTP request was sent to HTTPS port
\r\n
cloudflare
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n","title":"400 The plain HTTP request was sent to HTTPS port","robots":null,"server":"cloudflare","status":400,"sitemap":null,"location":"/","html_hash":141477257,"redirects":[],"components":{},"robots_hash":null,"securitytxt":null,"headers_hash":96733798,"sitemap_hash":null,"securitytxt_hash":null},"opts":{},"port":2053,"tags":["cdn"],"ip_str":"188.114.96.9","_shodan":{"id":"996f5c99-c660-4619-9c1d-7b6f26fc96f3","module":"auto","region":"na","crawler":"8f9776facb65747441d1d26b112981f75def6d58","options":{}},"domains":[],"location":{"city":"San Francisco","latitude":37.7621,"area_code":null,"longitude":-122.3971,"region_code":"CA","country_code":"US","country_name":"United States"},"hostnames":[],"timestamp":"2023-08-17T17:36:50.070056","transport":"tcp"},{"ip":3161612297,"os":null,"asn":"AS13335","isp":"Cloudflare, Inc.","org":"CloudFlare, Inc.","data":"HTTP/1.1 403 Forbidden\r\nDate: Sat, 02 Sep 2023 17:29:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 5893\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 800779496dff4636-DFW\r\n\r\n","hash":756359919,"http":{"waf":"Cloudflare (Cloudflare Inc.)","host":"188.114.96.9","html":"\n\n\n\n \n\nDirect IP access not allowed | Cloudflare\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n
Please enable cookies.
\n
\n
\n

\n Error\n 1003\n

\n Ray ID: 800779496dff4636 •\n 2023-09-02 17:29:11 UTC\n

Direct IP access not allowed

\n
\n\n
\n
\n

What happened?

\n

You've requested an IP address that is part of the Cloudflare network. A valid Host header must be supplied to reach the desired website.

\n \n
\n\n \n
\n

What can I do?

\n

If you are interested in learning more about Cloudflare, please visit our website.

\n
\n \n
\n\n
\n
\n Was this page helpful?\n \n \n
\n
\n Thank you for your feedback!\n
\n
\n\n\n
\n

\n Cloudflare Ray ID: 800779496dff4636\n •\n \n Performance & security by Cloudflare\n \n

\n \n
\n\n\n
\n
\n\n \n\n\n\n","title":"Direct IP access not allowed | Cloudflare","robots":null,"server":"cloudflare","status":403,"sitemap":null,"location":"/","html_hash":1101197795,"redirects":[],"components":{},"robots_hash":null,"securitytxt":null,"headers_hash":144737606,"sitemap_hash":null,"securitytxt_hash":null},"opts":{},"port":2082,"tags":["cdn"],"ip_str":"188.114.96.9","_shodan":{"id":"34ae2e64-e3fd-4f17-9f24-6b74bdd63c2e","module":"http-simple-new","region":"na","crawler":"85a2598833c03b2cff4b6d747001845f87a89147","options":{}},"domains":[],"location":{"city":"San Francisco","latitude":37.7621,"area_code":null,"longitude":-122.3971,"region_code":"CA","country_code":"US","country_name":"United States"},"hostnames":[],"timestamp":"2023-09-02T17:29:11.928111","transport":"tcp"},{"ip":3161612297,"os":null,"asn":"AS13335","isp":"Cloudflare, Inc.","org":"CloudFlare, Inc.","ssl":{"alpn":[],"cert":{"issued":"20230703000000Z","issuer":{"C":"US","O":"Cloudflare, Inc.","CN":"Cloudflare Inc ECC CA-3"},"pubkey":{"bits":256,"type":"dsa"},"serial":2.0515453915550058e+37,"expired":false,"expires":"20240702235959Z","sig_alg":"ecdsa-with-SHA256","subject":{"C":"US","L":"San Francisco","O":"Cloudflare, Inc.","CN":"sni.cloudflaressl.com","ST":"California"},"version":2,"extensions":[{"data":"0\\x16\\x80\\x14\\xa5\\xce7\\xea\\xeb\\xb0u\\x0e\\x94g\\x88\\xb4E\\xfa\\xd9$\\x10\\x87\\x96\\x1f","name":"authorityKeyIdentifier"},{"data":"\\x04\\x14nS\\x87\\x04\\' \\x03\\x07\\x1d\\tIp\\xf3\\x1f(\\xb0C*\\xc6\\x1d","name":"subjectKeyIdentifier"},{"data":"0E\\x82\\x16*.cdnjs.cloudflare.com\\x82\\x14cdnjs.cloudflare.com\\x82\\x15sni.cloudflaressl.com","name":"subjectAltName"},{"data":"\\x03\\x02\\x07\\x80","name":"keyUsage","critical":true},{"data":"0\\x14\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02","name":"extendedKeyUsage"},{"data":"0r07\\xa05\\xa03\\x861http://crl3.digicert.com/CloudflareIncECCCA-3.crl07\\xa05\\xa03\\x861http://crl4.digicert.com/CloudflareIncECCCA-3.crl","name":"crlDistributionPoints"},{"data":"0503\\x06\\x06g\\x81\\x0c\\x01\\x02\\x020)0\\'\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x02\\x01\\x16\\x1bhttp://www.digicert.com/CPS","name":"certificatePolicies"},{"data":"0h0$\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x01\\x86\\x18http://ocsp.digicert.com0@\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x864http://cacerts.digicert.com/CloudflareIncECCCA-3.crt","name":"authorityInfoAccess"},{"data":"0\\x00","name":"basicConstraints","critical":true},{"data":"\\x04\\x82\\x01j\\x01h\\x00u\\x00v\\xff\\x88?\\n\\xb6\\xfb\\x95Q\\xc2a\\xcc\\xf5\\x87\\xba4\\xb4\\xa4\\xcd\\xbb)\\xdchB\\n\\x9f\\xe6gLZ:t\\x00\\x00\\x01\\x89\\x19\\x8cog\\x00\\x00\\x04\\x03\\x00F0D\\x02 \\x11\\xd8.\\xb2l\\xc9\\xc4\\xb3A\\xa7\\xbc\\x87!EP\\xe3{\\x01\\x86j\\x0cA\\x82V\\xc2\\x1b\\xa9M$\\x8c\\x84\\x02\\x02 k\\x8f\\xb7\\x10\\xae\\xa0#\\x97\\x8cY\\xb1\\x07k]e.M\\xb7\\xef\\x86L\\x98.\\xc6?\\xd4\\xf5`-TN\\x06\\x00v\\x00\\xda\\xb6\\xbfk?\\xb5\\xb6\"\\x9f\\x9b\\xc2\\xbb\\\\k\\xe8p\\x91ql\\xbbQ\\x84\\x854\\xbd\\xa4=0H\\xd7\\xfb\\xab\\x00\\x00\\x01\\x89\\x19\\x8co\\\\\\x00\\x00\\x04\\x03\\x00G0E\\x02!\\x00\\xf5+\\x0b\\t\\xf7\\xe7\\x88\\x96\\x1c\\x1a\\xe5\\x83\\xb3\\xb6\\xc1z\\\\^\\xa0\\xa4\\xe5Sj\\xd3\\xc6\\xcb\\xe7\\xfbR\\rbY\\x02 \\x13\\xaf\\xac\\x90\\x82\\x85\\x9ex\\xe2r\\x13\\x12o\\xb2\\xb9\\x18\\xf2E/\\x9eA\\xd8C\"\\xfd\\x8b\\xed\\x04c`\\xc4\\xc1\\x00w\\x00;Swu>-\\xb9\\x80N\\x8b0[\\x06\\xfe@;g\\xd8O\\xc3\\xf4\\xc7\\xbd\\x00\\r-ro\\xe1\\xfa\\xd4\\x17\\x00\\x00\\x01\\x89\\x19\\x8co\\x95\\x00\\x00\\x04\\x03\\x00H0F\\x02!\\x00\\x81\\xa0\\xc71ra\\xa8\\xb0\\x82\\xbf/\\x0e\\xaeL\\xfe\\xba\\x9b\\x80\\xea\\xd2S\\x80@;\\xe8\\x858\\x1f\\xed\\xd6\\xaa\\xc2\\x02!\\x00\\xe0\\xca\\x8aT\\x95\\xdf\\xb9\\xdc\\xf1\\nS~^\\xb1\\x02\"\\xc4\\xa5\\x95\\xa2\\x11\\xd4\\xf8J\\x00aAL\r\n403 Forbidden\r\n\r\n

403 Forbidden

\r\n
cloudflare
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n","title":"403 Forbidden","robots":null,"server":"cloudflare","status":403,"sitemap":null,"location":"/","html_hash":1471629837,"redirects":[],"components":{},"robots_hash":null,"securitytxt":null,"headers_hash":-2088197660,"sitemap_hash":null,"securitytxt_hash":null},"opts":{"vulns":[],"heartbleed":"2023/09/03 13:42:45 188.114.96.9:2083 - SAFE\n"},"port":2083,"tags":["cdn"],"ip_str":"188.114.96.9","_shodan":{"id":"a1305870-6744-4676-b869-2fc85a928da7","ptr":true,"module":"https-simple-new","region":"","crawler":"91597136eb9b132d7cc954511e0d9cbe7ce2e377","options":{}},"domains":["cloudflare.com","cloudflaressl.com"],"location":{"city":"San Francisco","latitude":37.7621,"area_code":null,"longitude":-122.3971,"region_code":"CA","country_code":"US","country_name":"United States"},"hostnames":["cdnjs.cloudflare.com","sni.cloudflaressl.com"],"timestamp":"2023-09-03T13:42:38.190340","transport":"tcp"},{"ip":3161612297,"os":null,"asn":"AS13335","isp":"Cloudflare, Inc.","org":"CloudFlare, Inc.","data":"HTTP/1.1 403 Forbidden\r\nDate: Tue, 05 Sep 2023 23:03:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 5892\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 80221ae499c509ed-LAS\r\n\r\n","hash":-1311473370,"http":{"waf":"Cloudflare (Cloudflare Inc.)","host":"188.114.96.9","html":"\n\n\n\n \n\nDirect IP access not allowed | Cloudflare\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n
Please enable cookies.
\n
\n
\n

\n Error\n 1003\n

\n Ray ID: 80221ae499c509ed •\n 2023-09-05 23:03:21 UTC\n

Direct IP access not allowed

\n
\n\n
\n
\n

What happened?

\n

You've requested an IP address that is part of the Cloudflare network. A valid Host header must be supplied to reach the desired website.

\n \n
\n\n \n
\n

What can I do?

\n

If you are interested in learning more about Cloudflare, please visit our website.

\n
\n \n
\n\n
\n
\n Was this page helpful?\n \n \n
\n
\n Thank you for your feedback!\n
\n
\n\n\n
\n

\n Cloudflare Ray ID: 80221ae499c509ed\n •\n \n Performance & security by Cloudflare\n \n

\n \n
\n\n\n
\n
\n\n \n\n\n\n","title":"Direct IP access not allowed | Cloudflare","robots":null,"server":"cloudflare","status":403,"sitemap":null,"location":"/","html_hash":296273452,"redirects":[],"components":{},"robots_hash":null,"securitytxt":null,"headers_hash":144737606,"sitemap_hash":null,"securitytxt_hash":null},"opts":{},"port":2086,"tags":["cdn"],"ip_str":"188.114.96.9","_shodan":{"id":"a82291f6-c50e-4486-847d-f8be8391c465","ptr":true,"module":"http-simple-new","region":"na","crawler":"49217c0cdcbcebaf23c2979ae16d4eba64180b1f","options":{}},"domains":[],"location":{"city":"San Francisco","latitude":37.7621,"area_code":null,"longitude":-122.3971,"region_code":"CA","country_code":"US","country_name":"United States"},"hostnames":[],"timestamp":"2023-09-05T23:03:21.067084","transport":"tcp"},{"ip":3161612297,"os":null,"asn":"AS13335","isp":"Cloudflare, Inc.","org":"CloudFlare, Inc.","ssl":{"alpn":[],"cert":{"issued":"20230703000000Z","issuer":{"C":"US","O":"Cloudflare, Inc.","CN":"Cloudflare Inc ECC CA-3"},"pubkey":{"bits":256,"type":"dsa"},"serial":2.0515453915550058e+37,"expired":false,"expires":"20240702235959Z","sig_alg":"ecdsa-with-SHA256","subject":{"C":"US","L":"San Francisco","O":"Cloudflare, Inc.","CN":"sni.cloudflaressl.com","ST":"California"},"version":2,"extensions":[{"data":"0\\x16\\x80\\x14\\xa5\\xce7\\xea\\xeb\\xb0u\\x0e\\x94g\\x88\\xb4E\\xfa\\xd9$\\x10\\x87\\x96\\x1f","name":"authorityKeyIdentifier"},{"data":"\\x04\\x14nS\\x87\\x04\\' \\x03\\x07\\x1d\\tIp\\xf3\\x1f(\\xb0C*\\xc6\\x1d","name":"subjectKeyIdentifier"},{"data":"0E\\x82\\x16*.cdnjs.cloudflare.com\\x82\\x14cdnjs.cloudflare.com\\x82\\x15sni.cloudflaressl.com","name":"subjectAltName"},{"data":"\\x03\\x02\\x07\\x80","name":"keyUsage","critical":true},{"data":"0\\x14\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02","name":"extendedKeyUsage"},{"data":"0r07\\xa05\\xa03\\x861http://crl3.digicert.com/CloudflareIncECCCA-3.crl07\\xa05\\xa03\\x861http://crl4.digicert.com/CloudflareIncECCCA-3.crl","name":"crlDistributionPoints"},{"data":"0503\\x06\\x06g\\x81\\x0c\\x01\\x02\\x020)0\\'\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x02\\x01\\x16\\x1bhttp://www.digicert.com/CPS","name":"certificatePolicies"},{"data":"0h0$\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x01\\x86\\x18http://ocsp.digicert.com0@\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x864http://cacerts.digicert.com/CloudflareIncECCCA-3.crt","name":"authorityInfoAccess"},{"data":"0\\x00","name":"basicConstraints","critical":true},{"data":"\\x04\\x82\\x01j\\x01h\\x00u\\x00v\\xff\\x88?\\n\\xb6\\xfb\\x95Q\\xc2a\\xcc\\xf5\\x87\\xba4\\xb4\\xa4\\xcd\\xbb)\\xdchB\\n\\x9f\\xe6gLZ:t\\x00\\x00\\x01\\x89\\x19\\x8cog\\x00\\x00\\x04\\x03\\x00F0D\\x02 \\x11\\xd8.\\xb2l\\xc9\\xc4\\xb3A\\xa7\\xbc\\x87!EP\\xe3{\\x01\\x86j\\x0cA\\x82V\\xc2\\x1b\\xa9M$\\x8c\\x84\\x02\\x02 k\\x8f\\xb7\\x10\\xae\\xa0#\\x97\\x8cY\\xb1\\x07k]e.M\\xb7\\xef\\x86L\\x98.\\xc6?\\xd4\\xf5`-TN\\x06\\x00v\\x00\\xda\\xb6\\xbfk?\\xb5\\xb6\"\\x9f\\x9b\\xc2\\xbb\\\\k\\xe8p\\x91ql\\xbbQ\\x84\\x854\\xbd\\xa4=0H\\xd7\\xfb\\xab\\x00\\x00\\x01\\x89\\x19\\x8co\\\\\\x00\\x00\\x04\\x03\\x00G0E\\x02!\\x00\\xf5+\\x0b\\t\\xf7\\xe7\\x88\\x96\\x1c\\x1a\\xe5\\x83\\xb3\\xb6\\xc1z\\\\^\\xa0\\xa4\\xe5Sj\\xd3\\xc6\\xcb\\xe7\\xfbR\\rbY\\x02 \\x13\\xaf\\xac\\x90\\x82\\x85\\x9ex\\xe2r\\x13\\x12o\\xb2\\xb9\\x18\\xf2E/\\x9eA\\xd8C\"\\xfd\\x8b\\xed\\x04c`\\xc4\\xc1\\x00w\\x00;Swu>-\\xb9\\x80N\\x8b0[\\x06\\xfe@;g\\xd8O\\xc3\\xf4\\xc7\\xbd\\x00\\r-ro\\xe1\\xfa\\xd4\\x17\\x00\\x00\\x01\\x89\\x19\\x8co\\x95\\x00\\x00\\x04\\x03\\x00H0F\\x02!\\x00\\x81\\xa0\\xc71ra\\xa8\\xb0\\x82\\xbf/\\x0e\\xaeL\\xfe\\xba\\x9b\\x80\\xea\\xd2S\\x80@;\\xe8\\x858\\x1f\\xed\\xd6\\xaa\\xc2\\x02!\\x00\\xe0\\xca\\x8aT\\x95\\xdf\\xb9\\xdc\\xf1\\nS~^\\xb1\\x02\"\\xc4\\xa5\\x95\\xa2\\x11\\xd4\\xf8J\\x00aAL\r\n403 Forbidden\r\n\r\n

403 Forbidden

\r\n
cloudflare
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n","title":"403 Forbidden","robots":null,"server":"cloudflare","status":403,"sitemap":null,"location":"/","html_hash":1471629837,"redirects":[],"components":{},"robots_hash":null,"securitytxt":null,"headers_hash":-2088197660,"sitemap_hash":null,"securitytxt_hash":null},"opts":{"vulns":[],"heartbleed":"2023/09/03 04:37:19 188.114.96.9:2087 - SAFE\n"},"port":2087,"tags":["cdn"],"ip_str":"188.114.96.9","_shodan":{"id":"f9fdaf1b-ec27-45bf-a5e2-a761a44a3398","ptr":true,"module":"https-simple-new","region":"eu","crawler":"42f86247b760542c0192b61c60405edc5db01d55","options":{}},"domains":["cloudflare.com","cloudflaressl.com"],"location":{"city":"San Francisco","latitude":37.7621,"area_code":null,"longitude":-122.3971,"region_code":"CA","country_code":"US","country_name":"United States"},"hostnames":["cdnjs.cloudflare.com","sni.cloudflaressl.com"],"timestamp":"2023-09-03T04:37:15.337068","transport":"tcp"},{"ip":3161612297,"os":null,"asn":"AS13335","isp":"Cloudflare, Inc.","org":"CloudFlare, Inc.","ssl":{"alpn":[],"cert":{"issued":"20230703000000Z","issuer":{"C":"US","O":"Cloudflare, Inc.","CN":"Cloudflare Inc ECC CA-3"},"pubkey":{"bits":256,"type":"dsa"},"serial":2.0515453915550058e+37,"expired":false,"expires":"20240702235959Z","sig_alg":"ecdsa-with-SHA256","subject":{"C":"US","L":"San Francisco","O":"Cloudflare, Inc.","CN":"sni.cloudflaressl.com","ST":"California"},"version":2,"extensions":[{"data":"0\\x16\\x80\\x14\\xa5\\xce7\\xea\\xeb\\xb0u\\x0e\\x94g\\x88\\xb4E\\xfa\\xd9$\\x10\\x87\\x96\\x1f","name":"authorityKeyIdentifier"},{"data":"\\x04\\x14nS\\x87\\x04\\' \\x03\\x07\\x1d\\tIp\\xf3\\x1f(\\xb0C*\\xc6\\x1d","name":"subjectKeyIdentifier"},{"data":"0E\\x82\\x16*.cdnjs.cloudflare.com\\x82\\x14cdnjs.cloudflare.com\\x82\\x15sni.cloudflaressl.com","name":"subjectAltName"},{"data":"\\x03\\x02\\x07\\x80","name":"keyUsage","critical":true},{"data":"0\\x14\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02","name":"extendedKeyUsage"},{"data":"0r07\\xa05\\xa03\\x861http://crl3.digicert.com/CloudflareIncECCCA-3.crl07\\xa05\\xa03\\x861http://crl4.digicert.com/CloudflareIncECCCA-3.crl","name":"crlDistributionPoints"},{"data":"0503\\x06\\x06g\\x81\\x0c\\x01\\x02\\x020)0\\'\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x02\\x01\\x16\\x1bhttp://www.digicert.com/CPS","name":"certificatePolicies"},{"data":"0h0$\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x01\\x86\\x18http://ocsp.digicert.com0@\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x864http://cacerts.digicert.com/CloudflareIncECCCA-3.crt","name":"authorityInfoAccess"},{"data":"0\\x00","name":"basicConstraints","critical":true},{"data":"\\x04\\x82\\x01j\\x01h\\x00u\\x00v\\xff\\x88?\\n\\xb6\\xfb\\x95Q\\xc2a\\xcc\\xf5\\x87\\xba4\\xb4\\xa4\\xcd\\xbb)\\xdchB\\n\\x9f\\xe6gLZ:t\\x00\\x00\\x01\\x89\\x19\\x8cog\\x00\\x00\\x04\\x03\\x00F0D\\x02 \\x11\\xd8.\\xb2l\\xc9\\xc4\\xb3A\\xa7\\xbc\\x87!EP\\xe3{\\x01\\x86j\\x0cA\\x82V\\xc2\\x1b\\xa9M$\\x8c\\x84\\x02\\x02 k\\x8f\\xb7\\x10\\xae\\xa0#\\x97\\x8cY\\xb1\\x07k]e.M\\xb7\\xef\\x86L\\x98.\\xc6?\\xd4\\xf5`-TN\\x06\\x00v\\x00\\xda\\xb6\\xbfk?\\xb5\\xb6\"\\x9f\\x9b\\xc2\\xbb\\\\k\\xe8p\\x91ql\\xbbQ\\x84\\x854\\xbd\\xa4=0H\\xd7\\xfb\\xab\\x00\\x00\\x01\\x89\\x19\\x8co\\\\\\x00\\x00\\x04\\x03\\x00G0E\\x02!\\x00\\xf5+\\x0b\\t\\xf7\\xe7\\x88\\x96\\x1c\\x1a\\xe5\\x83\\xb3\\xb6\\xc1z\\\\^\\xa0\\xa4\\xe5Sj\\xd3\\xc6\\xcb\\xe7\\xfbR\\rbY\\x02 \\x13\\xaf\\xac\\x90\\x82\\x85\\x9ex\\xe2r\\x13\\x12o\\xb2\\xb9\\x18\\xf2E/\\x9eA\\xd8C\"\\xfd\\x8b\\xed\\x04c`\\xc4\\xc1\\x00w\\x00;Swu>-\\xb9\\x80N\\x8b0[\\x06\\xfe@;g\\xd8O\\xc3\\xf4\\xc7\\xbd\\x00\\r-ro\\xe1\\xfa\\xd4\\x17\\x00\\x00\\x01\\x89\\x19\\x8co\\x95\\x00\\x00\\x04\\x03\\x00H0F\\x02!\\x00\\x81\\xa0\\xc71ra\\xa8\\xb0\\x82\\xbf/\\x0e\\xaeL\\xfe\\xba\\x9b\\x80\\xea\\xd2S\\x80@;\\xe8\\x858\\x1f\\xed\\xd6\\xaa\\xc2\\x02!\\x00\\xe0\\xca\\x8aT\\x95\\xdf\\xb9\\xdc\\xf1\\nS~^\\xb1\\x02\"\\xc4\\xa5\\x95\\xa2\\x11\\xd4\\xf8J\\x00aAL\r\n403 Forbidden\r\n\r\n

403 Forbidden

\r\n
cloudflare
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n","title":"403 Forbidden","robots":null,"server":"cloudflare","status":403,"sitemap":null,"location":"/","html_hash":1471629837,"redirects":[],"components":{},"robots_hash":null,"securitytxt":null,"headers_hash":-2088197660,"sitemap_hash":null,"securitytxt_hash":null},"opts":{"vulns":[],"heartbleed":"2023/08/12 06:20:53 188.114.96.9:8443 - SAFE\n"},"port":8443,"tags":["cdn"],"ip_str":"188.114.96.9","_shodan":{"id":"a20e3bda-719d-4586-a603-68af98b6bb67","ptr":true,"module":"https","region":"","crawler":"91597136eb9b132d7cc954511e0d9cbe7ce2e377","options":{}},"domains":["cloudflare.com","cloudflaressl.com"],"product":"CloudFlare","location":{"city":"San Francisco","latitude":37.7621,"area_code":null,"longitude":-122.3971,"region_code":"CA","country_code":"US","country_name":"United States"},"hostnames":["cdnjs.cloudflare.com","sni.cloudflaressl.com"],"timestamp":"2023-08-12T06:20:47.191508","transport":"tcp"},{"ip":3161612297,"os":null,"asn":"AS13335","isp":"Cloudflare, Inc.","org":"CloudFlare, Inc.","data":"HTTP/1.1 403 Forbidden\r\nDate: Thu, 31 Aug 2023 13:42:31 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 16\r\nConnection: close\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 7ff5b27d5f77316b-DFW\r\n\r\nerror code: 1003","hash":-699700262,"opts":{},"port":8880,"tags":["cdn"],"ip_str":"188.114.96.9","_shodan":{"id":"b7a737bc-0e7f-427a-af61-243dba3f0889","module":"https-simple-new","region":"na","crawler":"85a2598833c03b2cff4b6d747001845f87a89147","options":{}},"domains":[],"location":{"city":"San Francisco","latitude":37.7621,"area_code":null,"longitude":-122.3971,"region_code":"CA","country_code":"US","country_name":"United States"},"hostnames":[],"timestamp":"2023-08-31T13:42:31.262345","transport":"tcp"}],"tags":["cdn"],"ports":[8880,2082,2083,2053,2086,2087,80,8443,443],"ip_str":"188.114.96.9","domains":["cloudflaressl.com","cloudflare.com"],"latitude":37.7621,"area_code":null,"hostnames":["cdnjs.cloudflare.com","sni.cloudflaressl.com"],"longitude":-122.3971,"last_update":"2023-09-05T23:03:21.067084","region_code":"CA","country_code":"US","country_name":"United States"},"pairedItem":{"item":0}}],"Get watched IPs & Ports":[{"json":{"ip":"116.202.106.35","ports":[5678,80]},"pairedItem":{"item":0}},{"json":{"ip":"188.114.96.9","ports":[8080,80]},"pairedItem":{"item":0}}]},"settings":{"executionOrder":"v1"},"versionId":"28b191c5-e23c-42db-9815-6770a2b72260","connections":{"For each IP":{"main":[[{"node":"Scan each IP","type":"main","index":0}]]},"Every Monday":{"main":[[{"node":"Get watched IPs & Ports","type":"main","index":0}]]},"Scan each IP":{"main":[[{"node":"Split out services","type":"main","index":0}]]},"Convert to table":{"main":[[{"node":"Convert to Markdown","type":"main","index":0}]]},"Unexpected port?":{"main":[[{"node":"Set data to post for each port","type":"main","index":0}]]},"Split out services":{"main":[[{"node":"Unexpected port?","type":"main","index":0}]]},"Convert to Markdown":{"main":[[{"node":"Create TheHive alert","type":"main","index":0}]]},"Create TheHive alert":{"main":[[{"node":"For each IP","type":"main","index":0}]]},"Get watched IPs & Ports":{"main":[[{"node":"For each IP","type":"main","index":0}]]},"Set data to post for each port":{"main":[[{"node":"Convert to table","type":"main","index":0}]]}}}