Do I need an account to use these tools?

No — none of the tools in this section require an account. Tools that run entirely in your browser (the subnet/CIDR/format/wildcard calculators) never contact our servers at all; any tool that does call our API is designed to use its own dedicated rate limit, kept separate from the metered /api/v1/ip lookup used elsewhere on this site, so using these tools is never meant to touch your regular API quota.

Is my IP address or the data I enter sent anywhere?

It depends on the tool. Subnet/CIDR/format/wildcard calculators run entirely in your browser and send nothing anywhere. Tools that need external data — DNS, ASN/WHOIS, MAC/OUI, IP risk — send the address or domain you enter to our API to look it up. Each tool's own page states which applies to it.

What's the difference between this page and the main IP lookup on the homepage?

The homepage resolves and reports on one IP address — usually your own. This section is a set of separate single-purpose utilities for specific network tasks (subnetting, DNS, WHOIS, leak testing, and more), most of which take arbitrary input rather than just looking up the caller.

Are these tools really free, with no rate limit?

They're designed to be free with no account required, but not unlimited — any tool that calls our API is planned to go through its own fixed rate limit per caller, kept separate from our regular metered API, so the service stays available to everyone. For heavy or automated use, prefer our regular metered API directly; see the API-equivalent section on each tool's page.

Why do some tools on this page say “coming soon”?

This section is still being built out. Every planned tool is listed here with what it will do so the page is a complete map of what's coming, but a “coming soon” entry isn't linked yet — check back, or watch this page directly.

Free Network, DNS & Privacy Tools

This page is a directory of free, no-signup network and IP utilities — subnet and CIDR calculators, DNS and mail-record checks, an ASN/WHOIS lookup, IP classification and risk tools, and a WebRTC leak test — each one solving a single task in your browser or through our public API, with no account required.

Pick a tool by what you're trying to do, not by its name: subnetting an IPv4 or IPv6 network uses the CIDR calculators; converting between IP notations, a range and a CIDR block, or a subnet mask and a wildcard mask uses the converters; auditing many addresses at once (which ones are private, bogon, or CGNAT) uses the bulk list tool; finding who registered an address or ASN uses the ASN/WHOIS lookup; and anything about what your own connection leaks — DNS, WebRTC, HTTP headers — uses the privacy tools below.

Privacy varies by tool, and each tool's own page states which applies to it: the subnet/CIDR/format/wildcard calculators run entirely client-side (the same shared arithmetic module ships with every page, no network request at all); the DNS, ASN/WHOIS, MAC/OUI and IP-risk tools call our public API and therefore send the address you enter to our servers; and the WebRTC leak test only ever talks to your own browser's ICE gathering process, never to us.

Edge cases and precision matter here more than most content: an IPv6 address has a canonical compressed form that two visually different strings can both represent, a /31 has no broadcast address by RFC 3021, and “bogon” and “private” are not the same classification. Each tool documents its own edge cases and links back to the relevant glossary entry below; if you only need a quick definition, the glossary section covers the terms used across this whole section.

Tools in this section

Network & IP

IPv4 Subnet Calculator Enter an address and prefix length to get the network and broadcast address, the usable host range, the host count, and the equivalent subnet/wildcard mask.
IPv6 Subnet Calculator Enter an IPv6 address and prefix length to get the network address, the last address in the block, the address count, and the canonical compressed form.
IP Format Converter Convert a single IPv4 address between dotted-decimal, hexadecimal, binary and 32-bit integer notation.
IP Range ↔ CIDR Converter Convert an arbitrary IP address range into the smallest set of CIDR blocks that cover it exactly, or expand a CIDR block back into its first and last address.
Wildcard Mask Converter Convert a subnet mask to its wildcard-mask form (or back) for use in Cisco-style ACLs and firewall rules.
Bulk IP List Classifier Paste a list of IP addresses to classify each one — private, loopback, link-local, CGNAT, multicast, or globally routable — entirely offline in your browser.
ASN Lookup / Whois Look up the origin ASN, AS holder name, announced prefix and a short RDAP whois summary for an IP address or AS number.

DNS & Mail

DNS & PTR Lookup Look up A/AAAA/MX/TXT/NS records for a domain, or the reverse-DNS (PTR) record for an IP address.
SPF / DKIM / DMARC / MX Checker Fetch and parse a domain's email-authentication records, showing whether SPF, DKIM and DMARC are configured and what each policy allows.

Privacy & Security

WebRTC Leak Test Runs a WebRTC ICE negotiation in your browser and lists every candidate address it finds, distinguishing mDNS-hidden from disclosed addresses — no leak/no-leak verdict yet, since that needs a STUN server this tool doesn't use.
HTTP Headers Inspector Shows the exact HTTP request headers your browser sent — User-Agent, Accept-Language, client hints, Do Not Track and more — with credential headers like Cookie and Authorization always excluded from the response.
IP Risk Check Checks an IP address against proxy, VPN, Tor and threat-intelligence signals and returns a risk score with the reasons behind it.
MAC / OUI Vendor Lookup Looks up the registered organization for a MAC address's OUI (the first three bytes assigned to a manufacturer).

Developer Tools

Developer Tools Base64, JWT, hash and User-Agent parsing utilities, grouped in their own subsection.

Script Recipes

Script Recipes Eight downloadable Python/JavaScript scripts, each solving one real task via the free API — bulk enrichment, log analysis, proxy filtering and more.

Which tool for which task

Task	Tool	What you get
Compute the network, broadcast and usable host range for an IPv4 CIDR block	IPv4 Subnet Calculator	Enter an address and prefix length to get the network and broadcast address, the usable host range, the host count, and the equivalent subnet/wildcard mask.
Compute the network address and range for an IPv6 prefix	IPv6 Subnet Calculator	Enter an IPv6 address and prefix length to get the network address, the last address in the block, the address count, and the canonical compressed form.
Convert an IP address between decimal, hex, binary and integer notation	IP Format Converter	Convert a single IPv4 address between dotted-decimal, hexadecimal, binary and 32-bit integer notation.
Convert between an arbitrary IP range and its minimal set of CIDR blocks	IP Range ↔ CIDR Converter	Convert an arbitrary IP address range into the smallest set of CIDR blocks that cover it exactly, or expand a CIDR block back into its first and last address.
Convert a subnet mask to a wildcard mask for ACL/firewall rules	Wildcard Mask Converter	Convert a subnet mask to its wildcard-mask form (or back) for use in Cisco-style ACLs and firewall rules.
Classify a pasted list of many IP addresses at once (private, bogon, CGNAT, etc.)	Bulk IP List Classifier	Paste a list of IP addresses to classify each one — private, loopback, link-local, CGNAT, multicast, or globally routable — entirely offline in your browser.
Check what your browser's WebRTC ICE negotiation actually discloses	WebRTC Leak Test	Runs a WebRTC ICE negotiation in your browser and lists every candidate address it finds, distinguishing mDNS-hidden from disclosed addresses — no leak/no-leak verdict yet, since that needs a STUN server this tool doesn't use.
Find who owns an IP address or AS number	ASN Lookup / Whois	Look up the origin ASN, AS holder name, announced prefix and a short RDAP whois summary for an IP address or AS number.
Look up DNS records for a domain or the PTR record for an IP address	DNS & PTR Lookup	Look up A/AAAA/MX/TXT/NS records for a domain, or the reverse-DNS (PTR) record for an IP address.
Check a domain's SPF, DKIM, DMARC and MX email-authentication setup	SPF / DKIM / DMARC / MX Checker	Fetch and parse a domain's email-authentication records, showing whether SPF, DKIM and DMARC are configured and what each policy allows.
Inspect exactly which HTTP request headers your browser sends	HTTP Headers Inspector	Shows the exact HTTP request headers your browser sent — User-Agent, Accept-Language, client hints, Do Not Track and more — with credential headers like Cookie and Authorization always excluded from the response.
Check whether an IP is flagged as proxy/VPN/Tor or carries other risk signals	IP Risk Check	Checks an IP address against proxy, VPN, Tor and threat-intelligence signals and returns a risk score with the reasons behind it.
Find the vendor registered for a MAC address's OUI prefix	MAC / OUI Vendor Lookup	Looks up the registered organization for a MAC address's OUI (the first three bytes assigned to a manufacturer).
Decode/encode Base64 and JWTs, compute hashes, parse a User-Agent string	Developer Tools	Base64, JWT, hash and User-Agent parsing utilities, grouped in their own subsection.

Glossary

CIDR: Classless Inter-Domain Routing — the address/prefix-length notation (e.g. 192.168.1.0/24) that replaced fixed address classes; the prefix length says how many leading bits identify the network.
ASN: Autonomous System Number — the number identifying a network operator's routing domain on the internet, used in BGP to determine which organization announces a block of addresses.
PTR record: A reverse-DNS record that maps an IP address back to a hostname — the opposite direction of a normal A/AAAA lookup.
SPF: Sender Policy Framework — a DNS TXT record listing which mail servers are allowed to send email for a domain, checked by receiving mail servers to catch spoofed sender addresses.
DKIM: DomainKeys Identified Mail — a cryptographic signature added to outgoing email, verified against a public key published in DNS, proving the message wasn't altered in transit.
DMARC: A DNS policy record that tells receiving mail servers what to do with mail that fails SPF or DKIM for a domain, and where to send failure reports.
ICE candidate: A network address WebRTC discovers while trying to establish a peer-to-peer connection — can include your local network address, a VPN's address, or your real public address, which is what the WebRTC leak test checks.
Bogon: An IP address that should never appear on the public internet — space reserved for private use, documentation, testing, or not yet allocated by a regional registry.

API equivalent

This hub page itself doesn't compute anything — it's an index. Each tool below either runs client-side or calls a specific endpoint under our public API; for a general-purpose IP lookup instead of one of these single-purpose tools, call the main endpoint directly:

curl

curl "https://ip.xakki.pro/api/v1/ip?ip=9.9.9.9"

Example response (trimmed):

{
  "schemaVersion": 15,
  "status": "ok",
  "ip": "9.9.9.9",
  "version": 4,
  "flags": {
    "isGlobal": true,
    "isBogon": false,
    "isCloud": false,
    "isTor": false
  }
}

Read the full API docs

Frequently asked questions

Do I need an account to use these tools?: No — none of the tools in this section require an account. Tools that run entirely in your browser (the subnet/CIDR/format/wildcard calculators) never contact our servers at all; any tool that does call our API is designed to use its own dedicated rate limit, kept separate from the metered /api/v1/ip lookup used elsewhere on this site, so using these tools is never meant to touch your regular API quota.
Is my IP address or the data I enter sent anywhere?: It depends on the tool. Subnet/CIDR/format/wildcard calculators run entirely in your browser and send nothing anywhere. Tools that need external data — DNS, ASN/WHOIS, MAC/OUI, IP risk — send the address or domain you enter to our API to look it up. Each tool's own page states which applies to it.
What's the difference between this page and the main IP lookup on the homepage?: The homepage resolves and reports on one IP address — usually your own. This section is a set of separate single-purpose utilities for specific network tasks (subnetting, DNS, WHOIS, leak testing, and more), most of which take arbitrary input rather than just looking up the caller.
Are these tools really free, with no rate limit?: They're designed to be free with no account required, but not unlimited — any tool that calls our API is planned to go through its own fixed rate limit per caller, kept separate from our regular metered API, so the service stays available to everyone. For heavy or automated use, prefer our regular metered API directly; see the API-equivalent section on each tool's page.
Why do some tools on this page say “coming soon”?: This section is still being built out. Every planned tool is listed here with what it will do so the page is a complete map of what's coming, but a “coming soon” entry isn't linked yet — check back, or watch this page directly.

Like this tool? Our API gives free accounts 1,000 requests/day.See the API docs →