ticket VG-366
add / fix issue with neg operator in ip groups if groups used for fraud alert