detect/iponly: rule parsing does not always apply netmask correctly
If the ipaddress is not the address range start, it's not masked to turn it into that. So
126.96.36.199/24 is not stored as address
188.8.131.52 with netmask 24, but as
184.108.40.206 with netmask 24. This is then propagated into the radix tree, where it is used as an exact key in exact lookups, giving unexpected results.