Query GreyNoise without the GN SDK

GreyNoise GNQL Query Results

import requests
import json

GN_API_KEY = ""
GN_QUERY = "last_seen:1d classification:malicious"

GN_QUERY_URL = "https://api.greynoise.io/v2/experimental/gnql"

HEADERS = {
    "accept": "application/json",
    "key": GN_API_KEY
}

gn_ip_list = []

continue_loop = True
PARAMS = {
    "query": GN_QUERY,
    "size": "10000",
    "scroll": ""
}

while continue_loop:
    # make the request to GN                                                                                                                                          
    r = requests.get(GN_QUERY_URL, headers=HEADERS, params=PARAMS).json()
    for i in r["data"]:
        gn_ip_list.append(i["ip"])

    # if there's more than 10,000 results add the scoll key to the params and keep requesting                                                                         
    if("scroll" in r):
        PARAMS["scroll"] = r["scroll"]
    else:
        continue_loop = False