regex fix

improved regex for remote attacker matching