use CIDR mask if given in blocking IP, closes 167