Wtfis: Passive hostname, domain and IP lookup tool for non-robots

Summary

wtfis Passive hostname, domain and IP lookup tool for non-robots WTF is it? wtfis is a commandline tool that gathers information about a domain, FQDN or IP address using various OSINT services. Unlike other tools of its kind, it's built specifically for human consumption, providing results that are pretty (YMMV) and easy to read and understand. This tool assumes that you are using free tier / community level accounts, and so makes as few API calls as possible to minimize hitting quotas and rate limits. The project name is a play on "whois". Data Sources Service Used in lookup Required Free Tier Virustotal All Yes Yes IP2Whois Domain/FQDN No Yes IPWhois IP address No Yes (no signup) Shodan IP address No No Greynoise IP address No Yes URLhaus All No Yes (no signup) AbuseIPDB IP address No Yes Virustotal The primary source of information. Retrieves: Hostname (FQDN), domain or IP Latest analysis stats with vendor detail Reputation score (based on VT community votes) Popularity ranks (Alexa, Cisco Umbrella, etc.) (FQDN and domain only) Categories (assigned by different vendors) Resolutions (FQDN and domain only) Last n IP addresses (default: 3, max: 10) Latest analysis stats of each IP above Whois Fallback only: if IP2Whois creds are not available Various whois data about the domain itself IP2Whois Optionally used if creds are provided. Retrieves: Whois Various whois data about the domain itself IP2Whois is recommended over Virustotal for whois data for a couple of reasons: VT whois data format is less consistent IP2Whois whois data tends to be of better quality than VT. Also, VT's registrant data is apparently anonymized. You can save one VT API call by offloading to IP2Whois. IPWhois Default Geolocation and ASN lookup source for IP addresses. Retrieves: ASN, Org, ISP and Geolocation IPWhois should not be confused with IP2Whois, which provides domain Whois data. Shodan GETs data from the /shodan/host/{ip} endpoint (see doc). For each IP, retrieves: List of open ports an...