added check for public IPs in host candidates