When there are multiple target IP addresses, the event line is too long and overflows. It will be more practical to just print Multiple IP addresses (count).
It is also necessary to fix the filter so that is correctly selects events with multiple addresses if the selected address matches any address in the list.