Skip to content

ZeroTrace OSINT

CIDR Tools

Network calculator, range expander, mask preview, and RFC1918 / CGNAT / loopback / bogon classification.

A small but heavily-used utility category. The CIDR tools normalise, expand, and classify IP networks — useful as the first step before any bulk-paste run against the network tools.

Three tools live here:

  • CIDR Calculator — facts about a single CIDR.
  • IP Range Expander — flatten a CIDR into individual IPs.
  • Mask preview — visualise the bit boundaries of a netmask.

CIDR Calculator

Input a CIDR block. The tool returns:

FieldExample
Network address192.168.1.0
Broadcast address192.168.1.255
Subnet mask255.255.255.0
Wildcard mask0.0.0.255
Total addresses256
Usable host count254 (excludes network + broadcast)
Reverse-DNS arpa zone1.168.192.in-addr.arpa
Binary mask preview11111111.11111111.11111111.00000000
ClassificationOne of: public, RFC1918 private, CGNAT, loopback, link-local, multicast, broadcast, bogon
Supernet (/N-1)The next-larger containing network
Immediate subnets (/N+1)The two subnets one bit deeper

The classification chip is the most immediately useful field — it tells you whether the CIDR is something you care about (public address space) or something you do not (private, link-local, loopback, multicast).

IP Range Expander

Input a CIDR block (or a start-end range). The tool returns a flat list of every IP in the range, with optional filters:

  • Drop network and broadcast addresses.
  • IPv4 only / IPv6 only.
  • Limit count (caps very large ranges to a configurable maximum).

The expanded list exports as:

  • Plain text, one IP per line.
  • CSV.
  • Nmap target file (.nmap).
  • Hosts file fragment.

This is the input you feed into a bulk-paste run against IP geolocation, reverse DNS, or IP reputation.

Be reasonable about what you expand. A /24 is 256 IPs — fine. A /16 is 65,536 IPs — bulk paste will handle it but the rate limits on public APIs will pace you. A /8 is 16.7 million IPs — almost certainly the wrong tool for what you actually want.

Per-IP rDNS pass

After expanding a range, you can optionally run per-IP reverse DNS in parallel (with bounded concurrency). This is the "interesting hosts inside an unknown range" pattern — most IPs return no PTR, the ones that do tell you what the operator wanted to publish.

Grouped /24 view

For larger expansions, the tool offers a grouped by /24 view that shows one row per /24 inside the original range, with the count of "interesting" IPs (those with a PTR or other signal). Helpful for narrowing where to actually look.

Pivots

Click on...Pivot to
Any expanded IPAll the IP-targeted tools
SupernetCIDR calculator (recursive)
SubnetCIDR calculator (recursive)
Reverse-DNS arpa zoneDNS lookup with PTR filter

Bulk CIDR

Bulk paste accepts multiple CIDRs and returns the calculator output for each in an aggregate table — useful when you have a stack of network blocks to classify quickly.

Sources

  • All CIDR math runs locally. No external sources are queried.
  • Per-IP rDNS pass uses the system DNS resolver.

Command Palette

Search for a command to run...