# count the lines of file to loop
cntfr=$(wc -l "$cmlog" | awk '{print$1}')

# start sequence until variable cntfr

for i in $(seq "$cntfr")
do

# read the line and grab the ip 
# ip will be xxx.xxx.xxx.xxx:port , so this next code
# will remove everything after the : and will get only 
# the cleaned ip

var1=$(sed -n ${i}p < $cmlog | awk '{print$11}' | cut -f1 -d":")

# this one i learned here , witch is put something like
# ex: 111.111.111.111 to 111.111.111.0/24
# this will be to see if subnet exists on a file ahead

ip2="${var1%.*}.0/24"

# fireips is a file containing all the blocked ips and 
# subnets in the firewall
# search for the subnet in fireips file
cksb=$(grep "$ip2" < "$path/fireips")

# case something was found
if [[ ! -z "$cksb" ]]
then

# remove with sed lines containing that IP from cmlog
sed -i -e '/"$var1"/d' $cmlog 

# inform user that ip subnet was found and was deleted

echo " - Existent Subnet : $ip2  for IP : $var1 - Cleaned"

fi

# objective of this next line is to check if the file #changed still have the initial number of lines , in case
#does not then update its value in the loop above

cntfr=$(wc -l "$cmlog" | awk '{print$1}')
done

cntfr=$(wc -l "$cmlog" | awk '{print$1}')
for i in $(seq "$cntfr")
do

if [[ "$cntfr" -le "$i" ]]
then
cntrf="$i"
else
var1=$(sed -n ${i}p < $cmlog | awk '{print$11}' | cut -f1 -d":")
ip2="${var1%.*}.0/24"
cksb=$(grep "$ip2" < "$path/fireips")
if [[ ! -z "$cksb" ]]
then
sed -i -e "/$var1/d" $cmlog 
echo " - Existent Subnet : $ip2  for IP : $var1 - Cleaned"
fi
cntfr=$(wc -l "$cmlog" | awk '{print$1}')
fi
done

#!/bin/bash
# blind as I have no idea what the cmlog looks like,
# but I can guess from your awk ;)
while read -a cmlogline
do
    grep -q "${cmlogline[10]/\.+([0-9]):*/.0\/24}" "$path/fireips" \
        && printf "Existent Subnet : %s for IP : %s - Cleaned\n" \
            ${cmlogline[10]/\.+([0-9]):*/.0\/24} \
            ${cmlogline[10]%:*} \
        || cat - <<<"${cmlogline[@]}" >> "${newcmlog}"
done < $cmlog
mv "${newcmlog}" "$cmlog"

#!/bin/bash
while read -a cmlogline
do
    foo2="${cmlogline[10]%:*}"
    foo1="${foo2%.*}.0/24"
    grep -q "$foo1" "$path/fireips" \
        && printf "Existent Subnet : %s for IP : %s - Cleaned\n" \
            ${foo1} \
            ${foo2} \
        || cat - <<<"${cmlogline[@]}" >> "${newcmlog}"
done < $cmlog
mv "${newcmlog}" "$cmlog"

#!/bin/bash
while read -a cmlogline
do
    foo2="${cmlogline[10]%:*}"
    foo1="${foo2%.*}.0/24"
    if ( grep -q "$foo1" "$path/fireips" )
    then
        printf "Existent Subnet : %s for IP : %s - Cleaned\n" ${foo1} ${foo2}
    else
        cat - <<<"${cmlogline[@]}" >> "${newcmlog}"
    fi
done < $cmlog
mv "${newcmlog}" "$cmlog"

#!/bin/bash
CheckLogs () {
removethese="" # zero length
while read -a cmlogline
do
    foo2="${cmlogline[10]%:*}"
    foo1="${foo2%.*}.0/24"
    if ( grep -q "$foo1" "$path/fireips" )
    then
        removethese+="${foo2}\|"
        # if you want to slow it down print stuff
    fi
done < $cmlog
return ${#removethese}
}
CleanLog () {
sed -i "/${removethese%\|}/d" "$cmlog"
# since removethese is a var should be ok with ARG_MAX
}

CheckLogs || CleanLog
# the count of removethese is used as return value of CheckLogs(),
# if it is none zero run CleanLog()

while read ip
do
    echo "${ip}"
    echo "${ip%.*}.0/24"
done < <(awk '{sub(/:.*/,"",$11);print $11}' "$cmlog")

while read ip
do
    echo "${ip}"
    echo "${ip%.*}.0/24"
done < <(sed -E 's/.* ([0-9]{1,3}(\.[0-9]{1,3}){3}):[0-9]+.*/\1/' "$cmlog" )

while read ip
do
    echo "${ip%:*}"
    echo "${ip%.*}.0/24"
done < <(grep -Eo "([0-9]{1,3}(\.[0-9]{1,3}){3}):[0-9]+" "$cmlog" )