Improve default for ip in 'where' event