filter only private IPs