* web server filter list, path= or remaddr= 05 Aug 2026
* three *** for comment!!!
path=#dev
path=$%7Bjndi:            *** 24 Dec 2021 log4j
path=${::-j}${::-n}${::-d}${::-i}   *** 24 Dec 2021 log4j
path=${jndi:            *** 24 Dec 2021 log4j
path=.htaccess          *** Aug 2025
path=.php      *** remove if you want to support PHP, etc
path=.pl       *** not using Perl
path=/..       *** parent paths
path=/.env              *** July 2025
path=/.env             *** Apr 2022
path=/.git/
path=/cgi      *** remove if using cgi
path=/config.
path=/debug/
path=/owa/              *** July 2025
path=/php
path=/pma
path=/pscan             *** July 2025
path=/security.txt      *** July 2025
path=/sql/
path=/wallet.dat       *** 2 July 2019 bitcoin
path=/webdav/          *** 2 July 2019
path=/webinterface/
path=/wp-includes/      *** Aug 2025
path=;echo     *** SQL injection
path=\..\..\..\
path=c:/windows
path=cgi-bin
path=formLogin          *** July 2025
path=metadatauploader   *** July 2025
path=myadmin
path=mysql
path=phpmy
path=sqlmap
path=web.xml
path=wp-login
useragent=masscan      *** June 2022 masscan/1.3+(https://github.com/robertdavidgraham/masscan)
referrer=python-requests    *** May 2021 hacking
country=AL
country=NA
country=BA               *** Bosnia
* asn=Forcepoint Cloud
* asn=ZScaler                 ** Switz and UK
* asn=M247 UK                   ** Metronet Manchester
asn=1337 Services GmbH        ** July 2026 hacker
asn=1&1 Versatel
asn=AT&T
asn=AVATEL TELECOM
asn=Alibaba
asn=Atlas Networks
asn=Bell Canada
asn=Bouygues Telecom       *** France
asn=CenturyLink
asn=Charter Communications
asn=Cogent Communications
asn=Comcast Cable
asn=Cox Communications
asn=Datacamp Limited    *** Canada
asn=DIGI SPAIN
asn=Deutsche Telekom
asn=DigitalOcean
asn=EGIHosting     *** USA
asn=Facebook       *** USA
asn=Fastplanet
asn=Fastweb         *** Italy
asn=FDCservers.net  *** USA
asn=Free SAS        *** France
asn=Frontier Communications
asn=GOLD IP
asn=GTT Communications
asn=HUAWEI
asn=HZ Hosting
asn=Hasan Host
asn=HostPapa
asn=Hurricane Electric
asn=Incubatec
asn=M247 Europe
asn=NOS COMUNICACOES
asn=Orange Espagne
asn=Orange S.A.
asn=RCN             *** USA
asn=Rogers Communications
asn=SCALEWAY S.A.S
asn=SEMrush CY LTD         *** probably Chinese
asn=Shaw Communications
asn=Shenzhen Tencent
asn=Societe Francaise
asn=Southern New England T
asn=Space Exploration
asn=Suddenlink Communications
asn=T-Mobile Austria
asn=T-Mobile USA
asn=TECHOFF SRV             *** Netherlands and Andorra
asn=TELEFONICA DE ESPANA
asn=Telecom Italia
asn=Telefonica Germany
asn=TELUS Communications
asn=Tianfeng
asn=trafficforce, UAB   *** USA
asn=VODAFONE ESPANA
asn=Verizon Business
asn=Vodafone GmbH
asn=Vodafone Italia
asn=Vodafone Libertel
asn=Vodafone Portugal
asn=Wave Broadband     *** USA
asn=Web2Objects LLC    *** USA
asn=WIND TRE           *** Italy
asn=Windstream
remhost=.as62651.net
remhost=.censys-scanner.com
remhost=.datapacket.com
remhost=.internet-census.org
remhost=.onyphe.net
remhost=.optonline.net
remhost=.rcncustomer.com
remhost=.scanner.modat.io
remhost=securityresearch.net
remhost=.shadowserver.org
remhost=.sparklight.net
remhost=.stretchoid.com
remhost=ColocationAmerica.com  *** Mar 2025
remhost=a.ahrefs.com
remhost=accessnow
remhost=anonymizing-proxy
remhost=arbor-observatory.com
remhost=artauctionindex.com
remhost=bc.googleusercontent.com   *** July 2026
remhost=binaryedge.ninja
remhost=bufferover.run
remhost=censys-scanner.com
remhost=colocrossing.com   *** 12 May 2018
remhost=criminalip.com
remhost=gino-research
remhost=hedgehogsecurity.com
remhost=hostname.localhost
remhost=internet-census.org
remhost=internet-measurement.com
remhost=ip.secureserver.net
remhost=members.linode.com
remhost=netsystemsresearch.com
remhost=petalsearch.com
remhost=pinga.lsd.cat
remhost=poneytelecom.eu
remhost=quintex.com
remhost=scan.leakix.org        *** May 2025
remhost=scan0.leakix.org
remhost=security.ipip.net
remhost=semrush.com
remhost=server-hosting.expert
remhost=serveroffer.net
remhost=shadowserver.org
remhost=shadowserver.org   *** Feb 2024
remhost=shodan.io
remhost=stretchoid.com
remhost=tor-
remhost=torexit
remhost=torproject
remhost=torservers
remhost=virtualsolution.net
remhost=vnpt.vn
remhost=vultr.com
remhost=webmeup.com         *** Apr 2022 crawler
remaddr=102.130.127.  *** Tor exit
remaddr=104.156.155.      *** Dec 2023 academyforinternetresearch.org
remaddr=104.167.242.  *** Tor exit
remaddr=104.244..  *** Tor exit
remaddr=104.248.
remaddr=107.174.146.  *** Tor exit
remaddr=107.189.1.  *** Tor exit
remaddr=107.189.10.  *** Tor exit
remaddr=107.189.11.  *** Tor exit
remaddr=107.189.13.  *** Tor exit
remaddr=107.189.14.  *** Tor exit
remaddr=107.189.3.  *** Tor exit
remaddr=107.189.30.  *** Tor exit
remaddr=107.189.31.  *** Tor exit
remaddr=107.189.4.  *** Tor exit
remaddr=107.189.5.  *** Tor exit
remaddr=107.189.6.  *** Tor exit
remaddr=107.189.7.  *** Tor exit
remaddr=107.189.8.  *** Tor exit
remaddr=109.70.100.  *** Tor exit
remaddr=109.71.252.  *** Tor exit
remaddr=124.198.131.  *** Tor exit
remaddr=124.198.132.  *** Tor exit
remaddr=171.25.193.  *** Tor exit
remaddr=171.25.193.  *** Tor exit
remaddr=176.65.148.  *** Tor exit
remaddr=176.65.149.  *** Tor exit
remaddr=178.175.148.  *** Tor exit
remaddr=178.218.144.  *** Tor exit
remaddr=179.43.159.  *** Tor exit
remaddr=185.100.85.  *** Tor exit
remaddr=185.100.87.  *** Tor exit
remaddr=185.104.120.  *** Tor exit
remaddr=185.106.102.  *** Tor exit
remaddr=185.107.57.  *** Tor exit
remaddr=185.12.45.
remaddr=185.129.61.  *** Tor exit
remaddr=185.207.107.  *** Tor exit
remaddr=185.220.10     *** Tor exit
remaddr=185.224.3.  *** Tor exit
remaddr=185.241.208.  *** Tor exit
remaddr=185.246.188.  *** Tor exit
remaddr=185.40.4.  *** Tor exit
remaddr=192.42.116.  *** Tor exit
remaddr=192.99.149.  *** Tor exit
remaddr=193.189.100.  *** Tor exit
remaddr=193.26.115.  *** Tor exit
remaddr=194.50.16.   *** Netherlands hacker Aug 2025
remaddr=195.47.238.  *** Tor exit
remaddr=195.96.137.       *** Dec 2023 academyforinternetresearch.org
remaddr=198.167.206.  *** Tor exit
remaddr=2.58.56.  *** Tor exit
remaddr=2001:470:1     *** shadow-server-foundation
remaddr=204.137.14.  *** Tor exit
remaddr=204.8.96.  *** Tor exit
remaddr=204.85.191.  *** Tor exit
remaddr=23.129.64.  *** Tor exit
remaddr=23.137.253.  *** Tor exit
remaddr=23.191.200.  *** Tor exit
remaddr=2001:470:      *** Shadow server
remaddr=38.135.24.  *** Tor exit
remaddr=38.97.116.  *** Tor exit
remaddr=45.138.16.  *** Tor exit
remaddr=45.141.215.  *** Tor exit
remaddr=45.66.35.  *** Tor exit
remaddr=45.84.107.  *** Tor exit
remaddr=45.90.185.  *** Tor exit
remaddr=91.208.75.  *** Tor exit
remaddr=91.227.77.   *** Tor exit
remaddr=92.255.57.     *** Jan 2025 Moscow