1001Ferramentas
🔍 Security

Overlapping CIDR Detector

Detect overlapping or duplicate CIDR blocks in a list — useful for firewall reviews, AWS Security Groups and ACLs.

IP blocks that overlap without anyone noticing

CIDR overlap is one of those things that only surfaces after it has caused damage. A firewall rule for 10.0.0.0/8 swallows the exception someone wrote for 10.0.5.0/24. Two VPC subnets with crossing ranges make peering impossible. A more specific static route captures traffic that was supposed to take another path. In a list a few dozen lines long, nobody catches this by eye.

Paste the list of IPv4 blocks, one per line, and the page compares every pair. Each block is turned into the numeric range it covers — first and last address — so the comparison becomes a question of ranges that cross. The result separates the cases: containment, when one block sits entirely inside another; duplication, when both cover exactly the same range; and partial overlap, when they cross without either containing the other.

The address you supply is reduced to the start of its network before the maths, so 10.0.0.37/24 is treated as 10.0.0.0/24 — the same thing a router does. Only IPv4 goes in here, and the tool points at conflicts without trying to consolidate anything: aggregating ranges is a design decision, not an arithmetic one, and it depends on where each route points.

Frequently asked questions

What counts as an overlap?
Any address that belongs to two blocks at once. 192.168.0.0/24 and 192.168.0.128/25 overlap because the second sits entirely inside the first. Meanwhile 192.168.0.0/24 and 192.168.1.0/24 are neighbours and share no address at all, so they come back clean.
Is overlap always a mistake?
No. In a routing table it is the whole point: the router picks the most specific prefix, which is how a /32 route deliberately overlaps the 0.0.0.0/0 default. The problem lives in contexts where order is undefined or where ranges have to be disjoint — subnet planning, VPC peering, allocating blocks to customers.
Does it work with IPv6?
No. The arithmetic uses 32-bit integers, the size of an IPv4 address. An IPv6 address is 128 bits and would need wider precision; pasting an IPv6 block here returns a prefix error rather than a wrong answer.

Related Tools