>They are never compared for greater-than or less-than.
if ip >= IP(10.34.12.3) && ip <= IP(10.34.12.9)
//is one of our database servers
> They are never added, subtracted, if abs(atk1.ip - atk2.ip) < 16
//same source likely, modify threshold
Netmask are useful, but sometimes doing regular math is a better fit for your problem. Adding an integer to an IP, subtracting IPs or comparing IPs all yield meaningful results.