pirxthepilot/wtfis

Health v2 · maintenance only

Adoption not part of the score

1836 stars · 83 forks observed · 2026-09-25

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

wtfis is a Python command-line tool that performs passive lookups of hostnames, domains, and IP addresses using OSINT services like VirusTotal, Shodan, AbuseIPDB, and Greynoise. It presents results in a human-readable format and minimizes API calls to stay within free-tier quotas.

Use cases

• look up who owns a domain from the terminal
• check if an IP address is malicious
• get whois and reputation info for a hostname
• investigate suspicious domains during incident response
• geolocate an IP address and find its ASN
• check domain resolutions and analysis stats from VirusTotal

When to choose

• you want readable OSINT lookup results designed for humans rather than scripts
• you rely on free-tier API accounts and need to conserve quota
• you want a single tool aggregating multiple threat intel sources
• you need quick passive reconnaissance from the command line

When to avoid

• you need fully automated, high-volume programmatic lookups
• you require active scanning or deep Shodan-style port data without a paid Shodan key
• you need a GUI or web interface

Facets

cli-tool · maturity active

osint security cli developer-tools security osint networking python cli cross-platform whois virustotal shodan abuseipdb greynoise ipinfo threat-intelligence passive-lookup domain-lookup ip-lookup command-line

Member repositories

For agents

markdown · JSON · MCP: product_card(name="pirxthepilot/wtfis")