suspicious path filter