In reply to Per Søderlind.

Note that only anonimizing the last octet isn’t sufficient according to the GDPR, as the resulting IP address can still be traced back to (only) 255 “people”.

For true anonymization, the last 2 octets should be masked. It messes up location data in some cases, but at least it’s truly anonymized.