Robustness of Adversarial Images Against Filters