GreyNoise Write IP's To File

gn_query_write_to_file.py

import requests
import json

GN_API_KEY = ""
GN_QUERY = 'tags:"SSH Bruteforcer" last_seen:1d spoofable:false'
file_name = "./greynoise_ips.txt"


GN_QUERY_URL = "https://api.greynoise.io/v2/experimental/gnql"


HEADERS = {
    "accept": "application/json",
    "key": GN_API_KEY
}

gn_ip_list = []

continue_loop = True
PARAMS = {
    "query": GN_QUERY,
    "size": "10000",
    "scroll": ""
}

file = open(file_name, "a")
while continue_loop:
    # make the request to GN
    print("making request")
    r = requests.get(GN_QUERY_URL, headers=HEADERS, params=PARAMS).json()
    for i in r["data"]:
        file.write("{}\n".format(i["ip"]))
    # if there's more than 10,000 results add the scoll key to the params and keep requesting
    if("scroll" in r):
        PARAMS["scroll"] = r["scroll"]
    else:
        continue_loop = False
        break

file.close()