A ton of shitty garbage traffic comes from these places. Kill.
socksthewolf.com
BadInternetActors.waf
1(ip.src.asnum in {14061 48090 211590 62240 24961}) or (ip.src in $scanners_trash) or (http.user_agent eq "") or (ip.src.asnum eq 396982 and http.user_agent ne "hstspreload-bot" and not http.request.uri.path in {"/" "/robots.txt"})
2
3# scanners_trash is a list of ip addresses that have been known to be incredibly abusive. IP blocks are usually meaningless, but these people are shit