From a check I just did:
User logs 23:03:43 2600:387:f:919::c talk block check Failed to log in to Wikipedia as XXX
IP: 2600:387:F:919:0:0:0:C <UA elided>
In one place it's got "2600:387:f:919::c", in another "2600:387:F:919:0:0:0:C", which is actually the same address. They should be canonicalized to the same string (including upper/lower case). If nothing else, it confuses scripts which try to aggregate entries. See for example, https://checkuser.wikimedia.org/w/index.php?curid=9878