Think of it as shorthand for defining a whole "street" or "neighborhood" of IP addresses, rather than just a single "house."
This notation has two parts:
The IP Address (123.45.67.0): This is the starting address of the block. It tells you where the IP range begins.
The Suffix (/24): This is called the prefix size. It specifies the size of the block. A smaller number means a larger block of IP addresses.
Here’s a simple guide to what some common suffixes mean:
CIDR Suffix | Number of IP Addresses in the Range |
/32 | 1 (a single, specific IP address) |
/27 | 32 |
/24 | 256 |
/16 | 65,536 |
Instead of using up 256 of your valuable exclusion slots to block 256 individual fraudulent IPs, we can use just one slot by blocking their entire /24
range.
This allows our system to provide a much broader and more durable defense against large-scale botnets and malicious data center networks. In short, CIDR is the technical language we use to block entire bad neighborhoods on the internet, not just individual bad actors.