imporve filtering spurious IP