filters/nginx-bots.pcre

@@ -5,9 +5,7 @@
 <HOST> .* "(GET|HEAD|POST) (https?://[0-9a-z.-]+)?(:[0-9]*)?/+Ringing\.at\.your\.dorbell
 <HOST> .* "(GET|HEAD|POST) (https?://[0-9a-z.-]+)?(:[0-9]*)?/.*(wget|curl)(\\x|%)20https?://
 <HOST> .* "(GET|HEAD|POST) .*/bin/(ba|c|z)?sh( |\\x20|%20)-c
-<HOST> .* "(GET|HEAD|POST) .*XDEBUG_SESSION_START=phpstorm
 <HOST> .* "(\\x[0-9a-z]{2,6})+" 400
-<HOST> .* (\\x[0]{2,6}){2,}.* 400
 # set: defscore=10
 # phpmyadmin and variations
 <HOST> .* "(GET|HEAD|POST) (https?://[0-9a-z.-]+)?(:[0-9]*)?/+(php|sqlite)-?(manager)?

filters/pptpd.preg

@@ -1,2 +0,0 @@
-# set: defscore=1
-pptpd.* CTRL: Client <HOST> control connection started

filters/ssh.preg

@@ -15,5 +15,3 @@ Invalid user [[:print:]]+ from <HOST>
 refused connect from [[:print:]]+ \(<HOST>\)
 Did not receive identification string from <HOST>
 Connection closed by <HOST>( port [0-9]+)? \[preauth\]
-Connection closed by authenticating user [[:print:]]+ <HOST> port [0-9]+ \[preauth\]
-banner exchange: Connection from <HOST> port [0-9]+: invalid format