I see this in the source code:
* The "network" component for IPv4 is the first three groups ("Class C")
* while for IPv6 it is the first four groups.
I don’t think that is correct, because there’s virtually no practical way to know the network component for a foreign IP that connects to us. I’m curious to know why the plugin author made such an arbitrary choice.
And of course, why he’s using the above information rather than the full IP in the notification email.
