Tools
Fill in the target, then tap the floating button. While a tool runs, that button is Stop. A tool marked unavailable is complete but cannot run right now, for example when iOS refuses the ICMP socket for Ping.
Updated 5 October 2026
Ping
Measure ICMP echo round-trip time from this device.
- Enter an IPv4 address, IPv6 address or host name.
- Tap Ping. Tap Stop to request cancellation and keep replies collected so far.
What the result means
Statistics cover replies that arrived. Lost echoes are counted, not plotted as 0 ms. No reply means no reply. Many networks drop ICMP. Try Port Scan or Diagnose Host if you need a TCP check.
Port Scan
Check which TCP ports accept a connection from this device.
- Enter the host.
- Choose a preset or type a list such as 22,80,443 or a range such as 1-1024.
- Tap Scan.
What the result means
Open: the connection completed. Refused: the host answered with a reset. No response: nothing came back before the timeout. Policy block: iOS refused the connection before it left the device. No response is not proof the host is offline.
DNS Lookup
Query records with the system resolver or a resolver you type.
- Enter a name, or an IP address for a PTR lookup.
- Leave the resolver empty for the system resolver, or enter an IP address to query that resolver directly.
What the result means
A custom resolver is queried over UDP with TCP fallback. Only the address you enter is contacted.
Diagnose Host
Resolve, connect, TLS and HTTP in one pass, with the evidence for each step. Ping is included only if you enable it.
- Enter a host or URL and the port for the TCP step.
- Tap the diagnose button.
- If a stage fails, use Retry or Skip on that row. Skip is recorded. Diagnose again starts over.
What the result means
Each stage has its own result. A failed stage is not hidden.
TLS & HTTP Check
Certificate chain, protocol, cipher and the HTTP response of an HTTPS endpoint.
- Enter a URL, host name or IP address.
- Run the check.
What the result means
Trust uses the system rules. Nothing is bypassed.
RDAP / WHOIS
Registration data for a domain or an IP range.
- Enter a domain name or an IP address.
- Run the lookup.
What the result means
The query goes to the registry. RDAP is used, with WHOIS on TCP port 43 as fallback. Only the IANA bootstrap list is cached, for seven days. The registry sees your source address and the query.
Wake on LAN
Send a unicast magic packet. There is no broadcast path.
- Enter the MAC address the device reported, and the IPv4 or IPv6 address on the same network.
- Send the packet.
What the result means
The target must support Wake on LAN. ACNet reports only that the datagram left the socket, not that the device woke.