Uses the RiskIQ API to return passive DNS information for an IP or FQDN, on a given date

pDNS.py

#!/usr/bin/env python3


import json
import requests

username = ""
key = ""


def get_pDNS(ip, date):
	auth = (username, key)
	url = "https://api.passivetotal.org/v2/dns/passive"
	data = {"query": ip, "start": date}
	
	response = requests.get(url, auth=auth, json=data)
	response = response.json()
	
	pDNS = []
	if len(response["results"]) > 0:
		for resolution in response["results"]:
			if resolution["resolveType"] != "email":
				pDNS.append(resolution["resolve"])
	
	return pDNS