It would be a nice administration option to limit the access per space to specific ip address ranges. So I can setup a space with anonymous access which is visible to a limited set of clients only.

Using filters of the underlying application container will not solve this, because the space will be displayed in the dashboard of all clients, and selecting the space name will give unwanted and confusing error responses. IMO should confluence decide the visibility of spaces depending on the ip address.