Skip to content

ZeroTrace OSINT

CIDR Tools

Network calculator, range expander, mask preview, and RFC1918 / CGNAT / loopback / bogon classification.

A small but heavily-used utility category. The CIDR tools normalise, expand, and classify IP networks, useful as the first step before any bulk-paste run against the network tools.

Three tools live here:

  • CIDR Calculator, facts about a single CIDR.
  • IP Range Expander, flatten a CIDR into individual IPs.
  • Mask preview, visualise the bit boundaries of a netmask.

CIDR Calculator

Input a CIDR block. The tool returns:

FieldExample
Network address192.168.1.0
Broadcast address192.168.1.255
Subnet mask255.255.255.0
Wildcard mask0.0.0.255
Total addresses256
Usable host count254 (excludes network + broadcast)
Reverse-DNS arpa zone1.168.192.in-addr.arpa
Binary mask preview11111111.11111111.11111111.00000000
ClassificationOne of: public, RFC1918 private, CGNAT, loopback, link-local, multicast, broadcast, bogon
Supernet (/N-1)The next-larger containing network
Immediate subnets (/N+1)The two subnets one bit deeper

The classification chip is the most immediately useful field, it tells you whether the CIDR is something you care about (public address space) or something you do not (private, link-local, loopback, multicast).

IP Range Expander

Input a CIDR block (or a start-end range). The tool returns a flat list of every IP in the range, with optional filters:

  • Drop network and broadcast addresses.
  • IPv4 only / IPv6 only.
  • Limit count (caps very large ranges to a configurable maximum).

The expanded list exports as:

  • Plain text, one IP per line.
  • CSV.
  • Nmap target file (.nmap).
  • Hosts file fragment.

This is the input you feed into a bulk-paste run against IP geolocation, reverse DNS, or IP reputation.

Be reasonable about what you expand. A /24 is 256 IPs, fine. A /16 is 65,536 IPs, bulk paste will handle it but the rate limits on public APIs will pace you. A /8 is 16.7 million IPs, almost certainly the wrong tool for what you actually want.

Per-IP rDNS pass

After expanding a range, you can optionally run per-IP reverse DNS in parallel (with bounded concurrency). This is the "interesting hosts inside an unknown range" pattern, most IPs return no PTR, the ones that do tell you what the operator wanted to publish.

Grouped /24 view

For larger expansions, the tool offers a grouped by /24 view that shows one row per /24 inside the original range, with the count of "interesting" IPs (those with a PTR or other signal). Helpful for narrowing where to actually look.

Pivots

Click on...Pivot to
Any expanded IPAll the IP-targeted tools
SupernetCIDR calculator (recursive)
SubnetCIDR calculator (recursive)
Reverse-DNS arpa zoneDNS lookup with PTR filter

Bulk CIDR

Bulk paste accepts multiple CIDRs and returns the calculator output for each in an aggregate table, useful when you have a stack of network blocks to classify quickly.

Sources

  • All CIDR math runs locally. No external sources are queried.
  • Per-IP rDNS pass uses the system DNS resolver.