Limit CIDR stripping to 32, not whole ranges

If you get a range like /24 or /8 or whatever, you will end up reporting
on the same host possibly thousands of times for services and vulns. I
doubt that's the expected behavior, ever.

This addresses PR #2044