(EventID:4624 LogonType:10) (-((IpAddress:\:\:1 OR IpAddress:10.* OR IpAddress:127.* OR IpAddress:172.16.* OR IpAddress:172.17.* OR IpAddress:172.18.* OR IpAddress:172.19.* OR IpAddress:172.20.* OR IpAddress:172.21.* OR IpAddress:172.22.* OR IpAddress:172.23.* OR IpAddress:172.24.* OR IpAddress:172.25.* OR IpAddress:172.26.* OR IpAddress:172.27.* OR IpAddress:172.28.* OR IpAddress:172.29.* OR IpAddress:172.30.* OR IpAddress:172.31.* OR IpAddress:192.168.* OR IpAddress:169.254.* OR IpAddress:fc* OR IpAddress:fd* OR IpAddress:fe8* OR IpAddress:fe9* OR IpAddress:fea* OR IpAddress:feb*) OR IpAddress:\-))