That's obviously some verbose logging. Took a little longer than I expected, but had to learn a few more ASIO and IP things, which simplified some code and got this subnet masking working for black and whitelisting.
[network]
# /bitnodes.earn.com:0.1/ sends unsolicited addresses.
blacklist = 188.166.69.73
# /nodes.mom.market:0.2/ sends unversioned sendaddrv2.
blacklist = 94.237.44.67
# /Satoshi:21.99.0/ sends unversioned sendaddrv2.
blacklist = 173.48.121.181
# wallet networks that constantly drop and reconnect
blacklist = 209.222.252.0/24
blacklist = 162.218.65.0/24
blacklist = 91.198.115.0/24