At least some of the software designed to detect malicious behavior assumes the ip is in ipv4 format. Example: I'm pretty sure fail2ban doesn't support ipv6, yet.