get_otx_domains_to_rpz.py

get_otx_domains_to_rpz.py

# Short demonstration script to write OTX hostnames to a RPZ format text-file

from OTXv2 import OTXv2
import os

# This is the API key for the user "api_example"
otx = OTXv2('766ba1df3ab54db9c0fcbf62ef048c3a04c260e8ca65b6c25346084b7b4719ad')
events = otx.get_all_indicators(author_name='alienvault')
output = ''

for event in events:
    try:
        if event['type'] == 'hostname' or event['type'] == 'domain':
            indicator = event['indicator']
            if '*.' in indicator:
                indicator = indicator.replace('.*','')
            output += indicator +' CNAME .' + os.linesep
            output += '*.' + indicator +' CNAME .' + os.linesep
    except Exception as e:
        traceback.print_exc()

with open('otx_blocklist.rpz','w') as f:
    f.write(output)