ip_hash_query.py

# python3 ip_hash_query.py 36.106.167.25                                                                                                                             
# takes an ip address as an argument and displays a list of ja3 fingerprints                                                                                         
# paste fingerprint into prompt to get a list of IP's associated with it                                                                                             

import requests
import sys

ip = sys.argv[1]
url = "https://api.greynoise.io/v2/noise/context/" + ip
API_KEY = ""

headers = {
    "accept": "application/json",
    "key": API_KEY
}

response = requests.get(url, headers=headers).json()
for i in response["raw_data"]["ja3"]:
    print(i["fingerprint"])

ja3_fingerprint = input("fingerprint: ")

url = "https://api.greynoise.io/v2/experimental/gnql?query={}&size=10000".format(ja3_fingerprint)

response = requests.get(url, headers=headers).json()
for i in response["data"]:
    print(i["ip"])