drop ip [64.120.223.136/25,64.120.223.136/25,64.120.223.136/25,64.120.223.136/25,69.162.101.202/25,69.162.101.202/25,209.217.246.182/25,209.217.246.182/25,80.153.120.157/25,80.153.120.157/25,80.153.120.157/25,80.153.120.157/25,46.4.163.192/25,46.4.163.192/25,170.66.11.10/25,170.66.11.10/25,208.40.101.250/25,208.40.101.250/25,208.15.82.131/25,208.15.82.131/25,94.23.80.81/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:24040000; rev:2307;) drop ip [184.154.54.162/25,184.154.54.162/25,209.151.138.117/25,209.151.138.117/25,209.151.138.117/25,209.151.138.117/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:24040001; rev:2307;) drop ip [95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:24040002; rev:2307;) drop ip [95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25,95.211.130.30/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:24040003; rev:2307;) drop ip [95.211.130.30/25,199.168.186.11/25,199.168.186.11/25,218.31.132.213/25,218.31.132.213/25,202.177.19.201/25,202.177.19.201/25,202.177.19.201/25,202.177.19.201/25,95.211.130.30/25,95.211.130.30/25,208.118.141.178/25,208.118.141.178/25,85.17.223.32/25,85.17.223.32/25,80.59.97.246/25,80.59.97.246/25,173.230.254.146/25,173.230.254.146/25,173.230.254.146/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:24040004; rev:2307;) drop ip [128.127.110.103/25,128.127.110.103/25,95.211.130.30/25,95.211.130.30/25,208.113.247.118/25,208.113.247.118/25,208.113.247.118/25,208.113.247.118/25,64.186.132.136/25,64.186.132.136/25,74.55.94.58/25,74.55.94.58/25,74.55.94.58/25,74.55.94.58/25,202.72.162.233/25,202.72.162.233/25,202.72.162.233/25,202.72.162.233/25,64.186.132.136/25,64.186.132.136/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:24040005; rev:2307;) drop ip [64.186.149.178/25,74.10.66.201/25,74.10.66.201/25,50.28.29.78/25,50.28.29.78/25,50.28.29.78/25,50.28.29.78/25,194.226.148.40/25,194.226.148.40/25,206.188.209.242/25,206.188.209.242/25,173.230.254.146/25,173.230.254.146/25,67.205.76.171/25,67.205.76.171/25,219.232.241.62/25,219.232.241.62/25,85.17.92.24/25,85.17.92.24/25,203.124.157.229/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:24040006; rev:2307;) drop ip [203.124.157.229/25,203.124.157.229/25,173.236.55.211/25,173.236.55.211/25,187.111.10.58/25,187.111.10.58/25,203.124.157.229/25,203.124.157.229/25,180.210.207.77/25,180.210.207.77/25,92.255.182.252/25,92.255.182.252/25,203.124.157.229/25,203.124.157.229/25,69.61.78.191/25,69.61.78.191/25,111.118.214.102/25,111.118.214.102/25,218.248.33.57/25,218.248.33.57/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:24040007; rev:2307;) drop ip [128.127.110.104/25,94.229.73.157/25,94.229.73.157/25,50.23.132.68/25,50.23.132.68/25,206.188.209.242/25,206.188.209.242/25,41.86.104.250/25,41.86.104.250/25,205.234.223.200/25,205.234.223.200/25,205.234.223.200/25,205.234.223.200/25,85.17.138.134/25,85.17.138.134/25,189.26.114.186/25,189.26.114.186/25,209.59.213.5/25,209.59.213.5/25,41.86.104.250/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:24040008; rev:2307;) drop ip [190.156.230.223/25,190.156.230.223/25,85.17.138.137/25,85.17.138.137/25,83.244.201.146/25,83.244.201.146/25,184.154.165.114/25,184.154.165.114/25,204.93.193.150/25,204.93.193.150/25,222.35.143.114/25,222.35.143.114/25,180.210.204.109/25,180.210.204.109/25,205.234.110.190/25,205.234.110.190/25,50.57.175.70/25,50.57.175.70/25,64.111.69.148/25,64.111.69.148/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:24040009; rev:2307;) drop ip [85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400010; rev:2307;) drop ip [85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,85.17.93.168/25,74.86.172.239/25,74.86.172.239/25,203.83.250.251/25,203.83.250.251/25,67.205.85.48/25,67.205.85.48/25,69.175.4.118/25,69.175.4.118/25,217.22.228.238/25,217.22.228.238/25,50.23.47.234/25,50.23.47.234/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400011; rev:2307;) drop ip [216.211.199.242/25,164.125.9.9/25,164.125.9.9/25,72.34.40.246/25,72.34.40.246/25,206.188.205.21/25,206.188.205.21/25,69.42.220.178/25,69.42.220.178/25,66.7.218.134/25,66.7.218.134/25,216.120.242.110/25,216.120.242.110/25,115.145.129.35/25,115.145.129.35/25,112.140.185.78/25,112.140.185.78/25,112.140.185.78/25,112.140.185.78/25,59.67.168.253/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400012; rev:2307;) drop ip [216.93.250.130/25,216.93.250.130/25,216.93.250.130/25,216.93.250.130/25,216.93.250.130/25,216.93.250.130/25,210.245.80.69/25,210.245.80.69/25,210.245.80.69/25,210.245.80.69/25,72.34.40.246/25,72.34.40.246/25,64.76.193.18/25,64.76.193.18/25,200.166.167.19/25,200.166.167.19/25,8.17.81.152/25,8.17.81.152/25,210.246.188.58/25,210.246.188.58/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400013; rev:2307;) drop ip [64.250.201.204/25,83.170.102.108/25,83.170.102.108/25,69.13.198.163/25,69.13.198.163/25,195.34.94.37/25,195.34.94.37/25,212.217.0.30/25,212.217.0.30/25,94.20.30.138/25,94.20.30.138/25,194.150.220.36/25,194.150.220.36/25,195.242.208.125/25,195.242.208.125/25,195.242.208.125/25,195.242.208.125/25,195.242.208.125/25,195.242.208.125/25,195.242.208.125/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400014; rev:2307;) drop ip [213.144.21.46/25,213.144.21.46/25,82.195.143.18/25,82.195.143.18/25,199.174.114.46/25,199.174.114.46/25,211.52.61.80/25,211.52.61.80/25,98.172.59.24/25,98.172.59.24/25,98.172.59.24/25,98.172.59.24/25,88.204.202.98/25,88.204.202.98/25,190.16.196.11/25,190.16.196.11/25,88.204.202.98/25,88.204.202.98/25,117.110.211.68/25,123.240.96.119/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400015; rev:2307;) drop ip [125.167.252.110/25,125.249.199.195/25,131.188.2.99/25,140.127.114.109/25,163.23.111.222/25,163.23.99.193/25,174.123.216.194/25,188.165.37.25/25,188.72.241.115/25,189.44.186.2/25,189.73.92.40/25,190.12.77.105/25,190.202.108.90/25,196.219.116.78/25,200.171.128.39/25,200.199.242.22/25,200.209.69.194/25,200.21.184.243/25,201.134.249.164/25,201.199.194.8/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400016; rev:2307;) drop ip [203.113.6.34/25,203.128.246.107/25,203.157.114.10/25,203.252.71.232/25,203.34.37.16/25,203.94.243.59/25,204.15.9.226/25,207.210.125.213/25,208.101.9.140/25,210.116.103.118/25,210.205.6.168/25,211.182.115.3/25,211.223.252.248/25,213.186.58.150/25,213.251.185.84/25,220.106.144.237/25,220.130.227.22/25,220.130.227.23/25,222.231.1.41/25,50.22.69.40/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400017; rev:2307;) drop ip [62.141.43.46/25,72.64.146.12/25,74.52.160.34/25,77.92.94.85/25,80.59.61.12/25,83.143.148.154/25,88.191.120.223/25,91.121.228.9/25,96.0.181.28/25,96.9.136.5/25,97.74.238.165/25,82.165.74.94/25,91.211.64.191/25,67.215.231.242/25,58.65.236.41/25,58.65.236.42/25,94.247.3.147/25,67.215.231.242/25,77.221.153.175/25,77.221.153.175/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400018; rev:2307;) drop ip [94.247.3.211/25,193.27.246.192/25,195.8.33.90/25,211.95.78.66/25,84.16.237.46/25,202.73.56.169/25,58.65.237.65/25,79.135.167.28/25,94.247.3.211/25,78.109.30.48/25,78.109.30.48/25,91.211.65.120/25,89.149.236.164/25,195.2.253.239/25,67.215.231.26/25,196.2.198.243/25,94.247.2.157/25,94.247.2.173/25,94.247.2.50/25,94.247.2.52/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400019; rev:2307;) drop ip [196.2.198.243/25,140.99.27.55/25,78.26.179.201/25,94.247.3.211/25,85.17.136.139/25,85.17.136.139/25,87.118.106.170/25,87.118.106.170/25,78.109.30.48/25,202.73.57.6/25,85.17.189.183/25,92.241.164.198/25,194.165.5.20/25,67.225.177.120/25,91.211.65.122/25,91.211.65.122/25,92.62.100.66/25,92.62.100.66/25,92.62.101.60/25,92.62.101.60/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400020; rev:2307;) drop ip [94.247.2.157/25,72.11.142.155/25,72.11.142.155/25,72.11.142.155/25,72.11.142.155/25,72.11.142.155/25,72.11.142.155/25,72.11.142.155/25,72.11.142.155/25,72.11.142.155/25,72.11.142.155/25,94.247.3.211/25,94.247.3.211/25,195.242.161.180/25,195.242.161.180/25,91.211.65.118/25,91.211.65.118/25,58.65.237.130/25,58.65.237.130/25,58.65.237.130/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400021; rev:2307;) drop ip [69.64.63.224/25,69.64.63.224/25,91.211.65.123/25,92.62.101.129/25,92.62.101.129/25,92.62.101.129/25,92.62.101.129/25,92.62.101.60/25,92.62.101.60/25,92.62.101.60/25,92.62.101.60/25,92.62.101.60/25,195.2.253.135/25,195.2.253.135/25,91.211.65.123/25,78.24.219.103/25,194.165.5.20/25,202.67.215.110/25,211.95.79.58/25,61.139.126.236/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400022; rev:2307;) drop ip [74.52.164.210/25,91.211.65.33/25,91.211.65.33/25,91.211.65.33/25,94.247.2.76/25,85.17.189.183/25,91.211.64.40/25,91.211.64.40/25,193.27.246.55/25,193.27.246.89/25,193.27.246.55/25,195.2.253.135/25,211.95.78.66/25,211.95.78.66/25,67.215.231.26/25,67.215.241.202/25,67.215.241.202/25,78.109.17.230/25,78.109.17.230/25,94.247.3.146/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400023; rev:2307;) drop ip [195.2.253.135/25,77.221.153.174/25,77.221.153.174/25,80.241.232.199/25,80.241.232.199/25,91.212.65.75/25,91.212.65.75/25,188.24.244.160/25,64.191.47.213/25,78.159.99.58/25,89.149.251.181/25,89.149.251.181/25,92.62.101.121/25,93.149.169.132/25,94.247.2.50/25,193.138.172.15/25,193.138.172.15/25,193.27.246.50/25,193.27.246.50/25,211.95.78.66/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400024; rev:2307;) drop ip [78.129.166.5/25,87.118.106.170/25,92.62.101.117/25,91.212.65.97/25,91.212.65.97/25,92.62.101.105/25,92.62.101.105/25,84.244.138.55/25,91.212.65.13/25,193.111.244.157/25,193.111.244.157/25,193.27.246.237/25,211.95.79.58/25,213.155.7.248/25,91.212.65.13/25,92.62.101.61/25,92.62.101.61/25,213.155.10.56/25,216.12.168.138/25,64.191.47.213/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400025; rev:2307;) drop ip [91.207.61.32/25,91.207.61.32/25,92.241.164.224/25,92.241.164.224/25,94.247.2.122/25,94.247.2.122/25,209.44.126.30/25,209.44.126.30/25,78.41.207.196/25,89.248.172.156/25,193.27.246.78/25,193.27.246.78/25,72.233.79.18/25,91.207.61.32/25,91.207.61.32/25,91.207.61.32/25,91.207.61.32/25,91.207.61.32/25,91.207.61.32/25,91.207.61.32/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400026; rev:2307;) drop ip [92.62.101.61/25,92.62.101.61/25,211.95.78.66/25,92.62.101.126/25,92.62.101.126/25,77.221.133.152/25,77.221.153.174/25,205.209.143.94/25,205.209.143.94/25,205.209.143.94/25,66.197.213.117/25,66.197.213.117/25,195.2.253.135/25,66.29.31.3/25,69.249.79.161/25,77.221.153.174/25,84.16.247.29/25,89.149.254.237/25,58.65.237.2/25,64.225.158.70/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400027; rev:2307;) drop ip [193.138.172.14/25,193.138.172.14/25,193.138.172.14/25,195.2.253.145/25,195.2.253.145/25,66.90.101.177/25,66.90.101.177/25,66.90.101.177/25,66.90.101.177/25,66.90.101.177/25,84.16.247.29/25,85.17.166.218/25,96.9.142.101/25,213.155.4.80/25,213.155.6.32/25,91.207.61.41/25,91.207.61.41/25,92.62.101.122/25,92.62.101.122/25,92.62.101.17/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400028; rev:2307;) drop ip [195.88.80.150/25,91.212.65.12/25,91.212.65.12/25,92.48.122.144/25,92.62.101.8/25,92.62.101.8/25,174.133.147.18/25,75.125.239.42/25,67.215.1.226/25,67.215.1.226/25,67.215.1.226/25,91.207.61.210/25,91.207.61.210/25,67.215.246.138/25,74.55.52.170/25,94.247.2.122/25,174.133.72.250/25,209.44.126.30/25,91.207.61.180/25,91.207.61.50/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400029; rev:2307;) drop ip [92.48.70.53/25,92.48.70.53/25,193.138.173.160/25,193.138.173.160/25,195.88.80.150/25,66.197.154.197/25,66.197.154.198/25,66.197.154.199/25,66.197.154.200/25,66.197.154.201/25,66.29.115.68/25,77.221.153.174/25,77.221.153.174/25,78.129.171.49/25,78.129.171.49/25,85.17.238.145/25,193.200.255.19/25,94.247.2.195/25,67.215.246.138/25,91.212.41.226/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400030; rev:2307;) drop ip [195.2.253.145/25,206.125.44.30/25,91.212.65.64/25,91.212.65.64/25,91.212.65.64/25,91.212.65.64/25,91.212.65.64/25,94.23.93.6/25,79.117.131.32/25,79.119.2.227/25,96.35.12.230/25,96.35.12.230/25,98.200.26.126/25,174.133.72.250/25,174.133.73.178/25,212.95.32.20/25,212.95.32.20/25,222.186.9.187/25,75.125.239.42/25,77.75.105.220/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400031; rev:2307;) drop ip [94.247.2.195/25,94.247.2.195/25,77.75.105.220/25,213.235.249.198/25,219.148.34.9/25,91.212.65.12/25,67.215.246.138/25,67.215.246.139/25,67.215.246.140/25,67.215.246.141/25,67.215.246.142/25,78.159.106.159/25,94.247.2.123/25,194.165.5.20/25,96.0.13.1/25,96.0.13.1/25,96.0.13.1/25,91.207.61.32/25,91.207.61.32/25,221.192.8.90/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400032; rev:2307;) drop ip [221.192.8.90/25,76.73.21.186/25,76.73.21.186/25,76.73.21.186/25,76.73.21.186/25,76.73.21.186/25,91.212.41.108/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400033; rev:2307;) drop ip [121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400034; rev:2307;) drop ip [121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,121.14.142.71/25,193.33.61.224/25,91.212.65.13/25,91.212.65.13/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400035; rev:2307;) drop ip [94.247.2.122/25,94.247.2.122/25,94.247.2.122/25,94.247.2.122/25,94.247.2.122/25,211.95.78.66/25,79.174.64.13/25,95.129.144.186/25,95.129.144.186/25,81.174.66.128/25,78.109.29.112/25,77.221.153.174/25,77.221.153.174/25,78.159.122.59/25,78.159.122.59/25,78.46.33.111/25,78.46.33.111/25,84.16.243.169/25,84.16.243.169/25,84.16.251.222/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400036; rev:2307;) drop ip [91.207.61.32/25,91.207.61.32/25,91.212.41.226/25,91.212.41.226/25,94.247.2.109/25,95.211.14.195/25,91.212.65.64/25,87.248.163.58/25,91.207.4.146/25,91.212.41.89/25,91.212.41.89/25,125.87.2.125/25,209.44.126.30/25,210.83.85.101/25,213.155.13.90/25,74.52.164.210/25,76.226.175.200/25,78.47.132.220/25,78.47.132.220/25,78.47.132.220/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400037; rev:2307;) drop ip [117.34.79.142/25,81.174.66.128/25,88.198.207.4/25,88.198.207.4/25,88.198.207.4/25,88.198.207.4/25,88.198.207.4/25,88.198.207.4/25,91.212.41.221/25,91.212.41.221/25,91.212.41.241/25,194.165.4.57/25,200.122.168.229/25,200.122.168.229/25,77.75.105.221/25,124.43.65.207/25,172.163.247.115/25,173.169.189.125/25,195.2.253.145/25,70.16.138.156/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400038; rev:2307;) drop ip [70.33.139.237/25,75.214.230.122/25,75.64.142.189/25,83.250.135.184/25,91.207.61.12/25,94.243.110.72/25,66.36.241.191/25,66.36.241.191/25,209.44.126.41/25,77.232.71.91/25,77.232.71.91/25,91.212.41.85/25,91.212.41.85/25,194.165.4.39/25,195.2.253.145/25,195.2.253.145/25,216.240.139.234/25,78.47.132.221/25,216.122.59.222/25,61.164.108.99/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400039; rev:2307;) drop ip [99.149.173.147/25,99.50.245.81/25,173.29.235.190/25,173.29.235.190/25,24.23.98.38/25,70.236.74.228/25,75.10.117.174/25,76.99.238.201/25,82.43.153.137/25,91.212.65.138/25,91.212.65.138/25,62.211.68.12/25,62.211.68.12/25,62.98.53.173/25,64.4.224.45/25,69.154.143.170/25,72.29.67.139/25,74.216.59.250/25,75.54.183.125/25,85.17.138.60/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400040; rev:2307;) drop ip [94.75.234.35/25,129.119.193.233/25,195.88.209.244/25,195.88.209.244/25,200.35.151.36/25,65.75.82.150/25,70.105.181.119/25,74.50.104.76/25,80.87.199.13/25,80.87.199.13/25,98.203.149.224/25,98.228.135.203/25,195.88.209.243/25,74.160.196.69/25,75.63.14.214/25,91.212.65.20/25,216.12.161.18/25,91.207.61.32/25,91.207.61.32/25,122.224.48.228/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400041; rev:2307;) drop ip [122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,122.224.48.228/25,61.147.120.58/25,61.147.120.58/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400042; rev:2307;) drop ip [61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400043; rev:2307;) drop ip [61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.147.120.58/25,61.19.252.95/25,61.19.252.95/25,72.10.169.26/25,89.149.227.200/25,89.149.227.200/25,89.149.227.200/25,89.149.227.200/25,89.149.227.200/25,89.149.227.200/25,89.149.227.200/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400044; rev:2307;) drop ip [89.149.227.200/25,89.149.227.200/25,91.212.65.12/25,91.212.65.121/25,91.212.65.121/25,211.95.78.99/25,67.212.80.124/25,67.212.80.124/25,202.73.57.11/25,202.73.57.11/25,216.12.161.18/25,80.24.176.145/25,85.17.169.55/25,85.17.169.55/25,91.207.61.180/25,213.171.222.30/25,82.103.131.211/25,85.13.236.154/25,91.212.65.145/25,91.212.65.145/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400045; rev:2307;) drop ip [91.212.65.145/25,213.136.106.214/25,69.64.67.194/25,69.64.67.194/25,69.64.67.194/25,78.109.29.112/25,78.109.29.114/25,94.75.234.35/25,74.52.164.210/25,125.211.195.11/25,125.211.195.11/25,208.98.6.67/25,208.98.6.67/25,210.230.183.246/25,213.163.64.81/25,72.232.234.218/25,173.20.112.35/25,193.27.247.240/25,219.148.34.10/25,219.148.34.9/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400046; rev:2307;) drop ip [69.31.80.179/25,69.31.80.179/25,82.98.235.173/25,82.98.235.173/25,82.98.235.173/25,82.98.235.173/25,82.98.235.173/25,82.98.235.173/25,91.207.61.47/25,91.207.61.47/25,91.212.41.236/25,91.212.41.29/25,91.212.65.35/25,91.212.65.35/25,121.14.59.51/25,121.14.59.51/25,194.165.4.146/25,194.165.4.237/25,207.226.178.149/25,207.226.178.149/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400047; rev:2307;) drop ip [207.226.178.149/25,207.226.178.149/25,209.44.126.41/25,72.232.242.86/25,72.232.242.86/25,72.232.242.86/25,77.221.153.175/25,77.221.153.175/25,91.207.61.41/25,193.27.247.240/25,207.226.168.239/25,72.26.145.118/25,74.222.1.78/25,82.120.80.136/25,69.162.80.182/25,89.149.242.25/25,12.73.96.59/25,151.60.63.4/25,74.54.77.82/25,78.109.29.116/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400048; rev:2307;) drop ip [218.213.77.96/25,218.213.77.96/25,218.213.77.96/25,69.64.67.194/25,69.64.67.194/25,91.212.41.237/25,95.211.8.61/25,95.211.8.61/25,190.246.55.231/25,193.111.244.157/25,209.160.67.74/25,89.149.242.25/25,92.60.176.45/25,92.60.176.45/25,125.163.251.219/25,200.171.128.39/25,201.134.249.164/25,63.227.18.137/25,194.165.4.142/25,194.165.4.142/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400049; rev:2307;) drop ip [202.80.178.128/25,202.91.74.136/25,208.98.22.241/25,210.110.97.14/25,62.81.136.90/25,63.249.200.230/25,64.32.13.133/25,66.7.56.125/25,66.7.56.125/25,67.19.17.210/25,91.207.61.12/25,66.199.229.253/25,69.64.67.194/25,69.64.67.194/25,70.85.249.98/25,78.129.166.166/25,78.129.166.166/25,91.212.132.11/25,92.60.176.13/25,92.60.176.13/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400050; rev:2307;) drop ip [85.10.221.161/25,85.17.138.60/25,121.10.108.42/25,121.10.108.42/25,208.88.227.234/25,208.88.227.234/25,209.44.111.57/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400051; rev:2307;) drop ip [59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,59.34.197.133/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400052; rev:2307;) drop ip [61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,61.160.247.37/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400053; rev:2307;) drop ip [61.160.247.37/25,61.160.247.37/25,61.160.247.37/25,209.162.188.225/25,216.226.131.77/25,216.226.131.77/25,213.155.29.101/25,71.174.51.86/25,122.224.5.189/25,222.214.218.63/25,222.214.218.63/25,63.247.71.7/25,91.212.65.145/25,91.212.65.145/25,67.241.105.5/25,74.82.38.95/25,74.82.38.95/25,194.33.180.41/25,218.6.12.82/25,66.226.87.107/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400054; rev:2307;) drop ip [59.93.67.114/25,59.93.67.114/25,61.235.117.71/25,61.235.117.71/25,61.235.117.71/25,61.235.117.71/25,61.235.117.71/25,72.41.202.78/25,91.212.65.13/25,202.114.200.215/25,207.182.136.108/25,69.3.109.79/25,212.117.175.218/25,62.149.27.117/25,64.191.25.166/25,66.148.80.4/25,66.148.80.4/25,66.148.80.4/25,66.148.80.4/25,66.148.80.4/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400055; rev:2307;) drop ip [66.148.80.4/25,69.10.35.251/25,69.10.35.251/25,69.10.35.251/25,69.10.35.251/25,88.214.201.132/25,174.133.71.57/25,174.133.71.62/25,65.247.182.200/25,74.55.136.72/25,61.235.117.71/25,61.235.117.71/25,61.235.117.71/25,61.235.117.71/25,72.9.108.26/25,174.132.165.154/25,194.165.4.25/25,194.165.4.25/25,89.149.194.45/25,96.0.43.43/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400056; rev:2307;) drop ip [92.60.176.33/25,92.60.176.33/25,213.182.197.42/25,213.182.197.42/25,213.182.197.42/25,122.224.5.189/25,122.224.5.189/25,218.93.205.243/25,115.137.197.60/25,125.163.251.219/25,201.16.248.189/25,208.98.22.241/25,84.244.138.55/25,88.208.0.131/25,92.229.139.178/25,92.229.139.178/25,216.12.161.18/25,79.174.64.36/25,85.114.141.207/25,91.189.113.210/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400057; rev:2307;) drop ip [206.126.97.21/25,203.64.102.151/25,83.3.132.70/25,75.151.32.182/25,202.14.70.116/25,200.6.218.194/25,221.1.204.243/25,198.64.140.97/25,217.124.41.76/25,174.133.73.90/25,83.140.191.168/25,74.52.164.210/25,212.117.174.14/25,122.117.195.111/25,122.117.195.111/25,123.242.165.138/25,123.242.165.138/25,140.127.22.184/25,201.134.249.164/25,201.134.249.164/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400058; rev:2307;) drop ip [202.83.82.145/25,206.126.97.21/25,208.98.22.220/25,208.98.22.220/25,208.98.22.220/25,213.136.106.214/25,220.130.180.180/25,220.130.180.180/25,220.130.180.180/25,220.130.180.180/25,220.130.180.180/25,61.59.200.127/25,64.71.54.109/25,67.19.190.90/25,74.53.235.98/25,217.91.55.188/25,61.59.200.127/25,220.130.180.180/25,61.235.117.77/25,61.250.95.250/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400059; rev:2307;) drop ip [196.15.183.180/25,78.39.195.23/25,210.208.59.24/25,130.209.233.202/25,74.52.164.210/25,74.55.52.170/25,74.55.52.170/25,75.125.239.42/25,212.117.174.14/25,220.130.180.180/25,122.70.145.140/25,122.70.145.140/25,202.62.224.16/25,212.117.174.14/25,85.92.157.141/25,91.212.198.36/25,83.3.132.70/25,91.212.198.116/25,122.70.145.135/25,122.70.145.135/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400060; rev:2307;) drop ip [213.163.91.244/25,94.42.55.88/25,79.113.183.19/25,78.51.125.154/25,122.70.145.157/25,203.116.63.105/25,77.221.153.181/25,77.221.153.181/25,77.221.153.181/25,77.221.153.181/25,77.221.153.181/25,77.221.153.181/25,122.70.145.135/25,195.2.253.253/25,122.70.145.135/25,195.2.253.253/25,213.163.91.244/25,213.163.91.244/25,212.103.194.188/25,212.103.194.188/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400061; rev:2307;) drop ip [195.190.13.106/25,195.190.13.106/25,199.238.181.158/25,199.238.181.161/25,195.95.151.184/25,210.51.166.239/25,210.51.166.239/25,210.51.166.239/25,210.51.166.239/25,122.224.6.35/25,210.51.166.239/25,74.52.164.210/25,91.212.220.122/25,195.2.253.253/25,87.255.54.12/25,85.17.138.61/25,95.211.8.215/25,195.2.253.95/25,195.2.253.95/25,212.103.194.188/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400062; rev:2307;) drop ip [64.191.22.21/25,94.76.194.116/25,91.212.198.36/25,67.225.158.16/25,67.225.158.17/25,67.225.158.18/25,67.225.158.19/25,195.2.253.253/25,91.213.126.50/25,203.116.63.105/25,195.2.253.95/25,122.70.145.135/25,122.70.145.135/25,195.2.253.95/25,174.133.34.178/25,174.133.34.178/25,174.133.73.178/25,97.74.181.55/25,97.74.181.55/25,97.74.181.55/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400063; rev:2307;) drop ip [97.74.181.55/25,97.74.181.55/25,97.74.181.55/25,97.74.181.55/25,195.2.253.89/25,195.2.253.89/25,64.131.76.231/25,64.131.76.231/25,64.131.76.231/25,85.17.87.141/25,85.17.87.141/25,95.211.13.248/25,89.111.176.22/25,91.213.72.22/25,88.198.8.15/25,88.198.103.132/25,88.198.103.132/25,88.198.103.132/25,77.221.153.181/25,209.44.126.30/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400064; rev:2307;) drop ip [147.202.41.44/25,122.70.145.148/25,122.70.145.135/25,91.213.72.22/25,88.198.103.132/25,88.198.103.132/25,77.221.153.181/25,88.198.103.132/25,209.44.126.30/25,202.144.207.11/25,122.70.145.135/25,147.202.41.44/25,95.211.13.248/25,95.211.13.248/25,61.188.87.143/25,195.2.253.89/25,61.188.87.143/25,202.104.237.2/25,202.104.237.2/25,202.104.237.2/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400065; rev:2307;) drop ip [202.104.237.2/25,97.74.143.59/25,97.74.143.59/25,97.74.143.59/25,97.74.143.59/25,88.191.15.229/25,195.2.253.85/25,69.89.31.230/25,69.89.31.230/25,64.22.119.118/25,64.22.119.118/25,64.22.119.118/25,64.22.119.118/25,89.149.227.51/25,203.251.93.133/25,203.251.93.133/25,195.2.253.85/25,62.193.229.83/25,62.193.229.83/25,122.70.145.146/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400066; rev:2307;) drop ip [195.88.190.235/25,66.45.250.250/25,66.45.250.250/25,195.2.253.140/25,91.207.6.242/25,200.160.243.179/25,200.160.243.179/25,91.213.72.70/25,125.128.6.11/25,125.128.6.11/25,125.128.6.11/25,125.128.6.11/25,125.128.6.11/25,125.128.6.11/25,125.128.6.11/25,91.212.220.2/25,195.2.252.122/25,94.75.216.181/25,83.133.113.14/25,212.174.200.114/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400067; rev:2307;) drop ip [213.163.89.54/25,213.163.89.54/25,95.211.8.215/25,91.212.220.123/25,193.13.87.38/25,212.174.200.125/25,212.174.200.125/25,213.163.89.54/25,213.163.89.54/25,213.163.89.54/25,195.88.190.245/25,195.88.190.245/25,195.88.190.245/25,195.88.190.235/25,61.235.117.83/25,213.163.89.57/25,213.163.89.57/25,204.124.182.135/25,206.123.115.194/25,207.228.233.6/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400068; rev:2307;) drop ip [174.120.38.119/25,174.143.25.37/25,174.36.192.34/25,195.34.25.36/25,208.53.183.65/25,209.248.147.110/25,217.15.81.8/25,208.100.38.37/25,213.163.91.244/25,213.163.91.244/25,91.213.126.112/25,65.111.164.118/25,65.60.44.122/25,66.132.239.173/25,66.230.195.113/25,66.96.214.117/25,67.213.213.158/25,67.213.222.104/25,67.223.232.29/25,67.225.168.183/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400069; rev:2307;) drop ip [69.36.94.33/25,69.60.10.2/25,69.64.92.87/25,70.86.189.250/25,72.34.60.135/25,74.208.167.71/25,77.79.19.33/25,78.111.98.227/25,78.40.224.155/25,79.143.129.11/25,79.143.129.13/25,79.143.129.17/25,79.143.129.19/25,79.143.129.29/25,79.143.129.3/25,79.171.18.30/25,80.93.49.223/25,81.209.164.65/25,84.242.167.49/25,85.17.237.5/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400070; rev:2307;) drop ip [88.191.63.28/25,88.208.209.48/25,91.121.108.53/25,91.121.121.6/25,91.121.134.229/25,91.121.148.73/25,91.121.167.41/25,91.121.24.139/25,91.121.7.26/25,91.121.74.84/25,91.121.95.136/25,91.121.97.186/25,91.151.86.140/25,92.48.110.155/25,93.186.178.76/25,95.130.174.200/25,98.142.210.207/25,209.9.188.130/25,203.116.63.105/25,203.116.63.105/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400071; rev:2307;) drop ip [61.188.87.143/25,66.147.237.116/25,193.169.13.23/25,207.204.9.223/25,207.204.9.223/25,193.169.13.23/25,61.188.87.143/25,213.163.89.57/25,75.101.230.112/25,75.101.230.112/25,91.212.220.118/25,83.149.112.96/25,95.211.13.248/25,78.109.18.210/25,83.233.30.101/25,83.233.30.101/25,213.163.89.57/25,163.19.86.129/25,203.113.6.34/25,98.126.116.2/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400072; rev:2307;) drop ip [85.17.139.149/25,92.60.176.33/25,92.60.176.33/25,92.60.176.33/25,92.60.176.33/25,98.126.116.2/25,84.16.224.55/25,193.33.61.160/25,193.33.61.160/25,193.33.61.160/25,193.33.61.160/25,193.33.61.160/25,74.214.51.73/25,222.35.137.209/25,95.211.13.248/25,222.35.137.209/25,66.96.207.35/25,66.96.207.35/25,85.131.154.34/25,85.131.154.34/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400073; rev:2307;) drop ip [87.242.115.123/25,173.45.229.209/25,173.45.229.209/25,193.27.246.178/25,213.163.89.56/25,95.211.13.248/25,213.163.89.56/25,193.27.246.178/25,121.11.76.159/25,98.126.116.2/25,61.235.117.83/25,61.235.117.83/25,61.235.117.83/25,78.46.251.41/25,91.213.72.70/25,195.93.208.18/25,195.93.208.18/25,98.126.32.194/25,209.31.180.144/25,216.155.153.212/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400074; rev:2307;) drop ip [213.163.89.54/25,121.11.76.159/25,98.126.116.2/25,98.126.116.2/25,68.222.251.128/25,68.222.251.128/25,67.219.46.173/25,212.95.55.60/25,212.95.55.62/25,217.20.116.212/25,217.20.116.213/25,217.20.122.234/25,217.20.122.235/25,78.159.122.197/25,78.159.122.198/25,78.159.122.199/25,78.159.122.226/25,84.16.247.13/25,84.16.247.14/25,84.16.247.15/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400075; rev:2307;) drop ip [89.149.236.143/25,89.149.236.144/25,89.149.236.158/25,89.149.236.185/25,212.95.55.61/25,163.19.225.120/25,217.20.127.89/25,212.103.194.188/25,91.213.72.70/25,91.213.72.70/25,98.126.116.2/25,212.154.58.92/25,66.7.203.81/25,174.139.241.2/25,96.9.142.101/25,69.50.195.69/25,76.73.76.74/25,98.126.116.2/25,62.204.110.243/25,98.126.116.2/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400076; rev:2307;) drop ip [195.93.208.84/25,210.51.166.242/25,212.154.58.92/25,98.126.116.2/25,210.51.166.242/25,95.211.13.248/25,195.93.208.106/25,195.93.208.106/25,121.11.76.159/25,121.11.76.159/25,202.141.148.29/25,212.117.162.51/25,98.143.147.252/25,98.126.116.2/25,98.126.116.2/25,83.133.121.2/25,213.163.91.244/25,213.163.91.244/25,213.163.91.244/25,91.213.72.70/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400077; rev:2307;) drop ip [193.169.13.21/25,193.169.13.21/25,195.93.208.67/25,98.126.116.2/25,98.126.116.2/25,209.162.7.191/25,96.18.115.154/25,78.25.27.20/25,78.25.27.20/25,95.211.8.216/25,91.213.94.130/25,209.160.21.99/25,205.178.144.192/25,122.70.145.148/25,203.117.91.68/25,205.178.144.192/25,94.76.220.89/25,212.117.177.8/25,212.117.177.8/25,195.93.208.114/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400078; rev:2307;) drop ip [89.149.242.119/25,91.213.72.70/25,195.93.208.106/25,213.163.91.244/25,122.70.145.146/25,122.70.145.148/25,91.213.72.70/25,213.163.91.244/25,98.126.116.2/25,83.233.30.101/25,213.163.91.244/25,88.191.15.229/25,121.11.76.159/25,203.117.91.68/25,195.93.208.84/25,213.163.91.244/25,68.222.251.128/25,210.51.166.242/25,95.211.13.248/25,91.213.72.22/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400079; rev:2307;) drop ip [62.193.229.83/25,195.93.208.114/25,122.70.145.148/25,122.70.145.148/25,94.75.226.73/25,203.117.91.68/25,122.70.145.148/25,205.178.144.192/25,212.117.177.8/25,94.76.220.89/25,94.75.226.73/25,78.25.27.20/25,195.93.208.114/25,222.103.205.149/25,222.103.205.149/25,82.98.235.187/25,82.98.235.187/25,82.98.235.187/25,82.98.235.187/25,82.98.235.187/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400080; rev:2307;) drop ip [122.70.145.148/25,213.163.91.244/25,213.163.91.244/25,91.212.220.162/25,209.250.240.98/25,216.121.82.196/25,122.70.145.184/25,78.28.197.90/25,209.250.240.98/25,122.70.145.184/25,78.28.197.90/25,213.163.91.244/25,203.117.91.69/25,122.70.145.184/25,216.121.82.196/25,209.250.240.98/25,91.212.220.162/25,81.86.111.100/25,174.120.21.188/25,85.17.159.64/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400081; rev:2307;) drop ip [91.212.220.228/25,112.137.162.91/25,173.201.6.52/25,210.51.166.218/25,210.51.166.42/25,210.51.166.42/25,217.23.5.219/25,218.93.205.238/25,218.93.205.250/25,218.93.248.238/25,219.152.120.118/25,85.17.148.49/25,91.212.220.110/25,91.212.220.110/25,91.212.220.110/25,91.212.220.110/25,91.212.220.110/25,91.213.72.68/25,91.212.127.200/25,85.12.43.141/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400082; rev:2307;) drop ip [91.212.127.226/25,222.103.205.149/25,83.149.112.111/25,85.10.194.162/25,85.10.194.162/25,88.198.8.15/25,85.10.194.162/25,222.103.205.149/25,85.10.194.162/25,85.10.194.162/25,91.212.220.229/25,85.10.194.162/25,202.29.9.192/25,83.149.112.111/25,83.149.112.115/25,98.204.66.255/25,193.104.27.42/25,193.104.27.42/25,195.93.208.66/25,195.93.208.67/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400083; rev:2307;) drop ip [193.104.27.90/25,203.117.91.69/25,193.104.27.90/25,193.104.27.100/25,193.104.27.54/25,193.104.27.54/25,203.117.91.68/25,193.104.27.54/25,193.104.27.54/25,203.117.91.73/25,67.196.132.35/25,195.93.208.70/25,62.193.249.21/25,74.200.69.178/25,74.200.69.178/25,203.117.91.73/25,62.193.249.21/25,217.145.83.229/25,203.117.91.73/25,195.88.209.30/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400084; rev:2307;) drop ip [196.218.21.19/25,196.218.21.19/25,212.117.160.18/25,203.117.91.69/25,62.193.249.21/25,195.93.208.70/25,174.143.153.124/25,174.143.153.124/25,201.134.249.164/25,193.104.27.54/25,193.104.27.100/25,193.104.27.54/25,174.143.153.124/25,203.117.91.73/25,203.117.91.73/25,91.212.220.229/25,203.117.91.73/25,193.104.27.4/25,193.104.27.4/25,193.104.27.4/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400085; rev:2307;) drop ip [95.211.8.216/25,212.103.194.188/25,195.88.191.46/25,210.51.166.220/25,210.51.166.220/25,93.158.114.138/25,95.211.8.216/25,95.211.92.253/25,95.211.92.253/25,95.211.92.253/25,95.211.92.253/25,95.211.92.253/25,87.118.84.63/25,87.118.84.63/25,87.118.84.63/25,87.118.84.63/25,87.118.84.63/25,203.117.91.73/25,203.117.91.73/25,188.165.65.173/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400086; rev:2307;) drop ip [188.165.65.173/25,188.165.65.173/25,91.213.174.6/25,66.96.9.226/25,122.70.145.184/25,122.70.145.184/25,210.51.166.231/25,83.149.112.115/25,83.149.112.115/25,193.104.27.171/25,195.242.161.141/25,193.104.27.11/25,210.51.166.231/25,193.104.27.171/25,195.242.161.141/25,83.149.112.115/25,193.169.12.51/25,193.104.27.11/25,195.242.161.141/25,193.104.27.171/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400087; rev:2307;) drop ip [78.129.166.141/25,78.129.166.141/25,95.211.14.162/25,91.211.117.63/25,93.158.114.138/25,122.70.145.184/25,83.149.112.115/25,193.104.41.66/25,122.70.145.184/25,193.104.27.14/25,122.70.145.184/25,193.104.27.14/25,193.104.41.66/25,87.102.68.100/25,213.163.91.237/25,213.163.91.237/25,213.163.91.237/25,200.80.97.174/25,194.254.163.71/25,87.102.68.100/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400088; rev:2307;) drop ip [193.104.22.90/25,193.104.27.171/25,87.102.68.100/25,193.104.22.90/25,193.104.27.171/25,193.104.22.90/25,95.211.8.216/25,195.88.209.254/25,193.104.27.171/25,83.149.112.111/25,193.104.27.86/25,193.104.27.86/25,190.81.28.182/25,89.149.217.157/25,193.169.12.53/25,193.169.12.53/25,193.104.27.91/25,91.213.72.51/25,95.211.13.155/25,212.103.194.188/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400089; rev:2307;) drop ip [95.211.13.155/25,83.149.112.96/25,83.149.112.115/25,66.96.9.226/25,91.213.72.51/25,83.149.112.96/25,203.117.91.69/25,212.103.194.188/25,210.51.166.43/25,204.3.167.134/25,91.212.226.178/25,99.242.228.10/25,210.51.166.217/25,210.51.166.217/25,193.104.41.68/25,87.106.38.65/25,195.93.208.58/25,124.217.251.45/25,95.168.182.61/25,193.104.41.68/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400090; rev:2307;) drop ip [195.93.208.58/25,124.217.251.45/25,210.233.73.206/25,95.168.182.61/25,195.93.208.58/25,193.104.41.68/25,87.106.38.65/25,88.80.10.1/25,202.141.148.29/25,217.23.7.161/25,91.213.72.51/25,122.224.9.67/25,98.14.190.23/25,193.104.27.234/25,193.104.27.234/25,193.104.27.234/25,193.104.41.75/25,210.51.166.217/25,213.163.89.254/25,193.104.41.75/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400091; rev:2307;) drop ip [193.104.41.75/25,193.169.250.20/25,193.169.250.20/25,193.169.250.20/25,193.169.250.20/25,188.72.225.55/25,114.207.112.169/25,114.207.112.169/25,217.174.254.75/25,212.117.185.75/25,212.117.185.75/25,212.117.185.75/25,193.104.27.35/25,212.117.185.75/25,212.117.185.75/25,122.224.9.67/25,222.35.139.242/25,213.163.89.254/25,213.163.89.254/25,121.12.109.63/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400092; rev:2307;) drop ip [213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.108.56.140/25,213.163.89.254/25,218.24.43.14/25,219.148.34.10/25,222.35.139.242/25,89.149.208.241/25,89.149.208.241/25,95.211.8.216/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400093; rev:2307;) drop ip [83.149.112.111/25,74.81.78.68/25,210.51.166.233/25,210.51.166.233/25,210.51.166.233/25,210.51.166.233/25,210.51.166.233/25,210.51.166.233/25,83.149.112.111/25,67.100.161.6/25,67.100.161.6/25,193.104.27.139/25,213.163.89.76/25,213.155.22.16/25,193.104.41.132/25,83.133.113.14/25,193.104.27.82/25,193.104.27.139/25,213.163.89.76/25,83.133.113.14/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400094; rev:2307;) drop ip [213.163.89.53/25,83.133.113.14/25,213.163.89.76/25,67.100.161.6/25,193.104.27.82/25,193.104.41.132/25,193.104.27.139/25,91.201.29.250/25,193.104.27.139/25,193.104.27.139/25,74.200.69.177/25,193.104.41.132/25,74.200.69.177/25,213.163.89.253/25,74.200.69.177/25,74.200.69.177/25,95.211.21.86/25,208.98.50.221/25,208.98.50.221/25,208.98.50.221/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400095; rev:2307;) drop ip [208.98.50.221/25,208.98.50.221/25,90.5.177.194/25,89.138.7.136/25,174.101.253.178/25,217.132.13.196/25,69.249.213.188/25,99.243.19.2/25,68.154.37.89/25,66.25.227.224/25,70.125.102.130/25,96.54.78.212/25,75.36.218.139/25,89.143.17.40/25,68.174.23.154/25,68.47.99.249/25,79.179.70.34/25,70.137.21.203/25,75.196.211.113/25,99.131.12.208/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400096; rev:2307;) drop ip [79.176.56.52/25,91.200.164.26/25,202.130.189.133/25,204.27.57.154/25,204.27.57.154/25,204.27.57.154/25,204.27.57.154/25,204.27.57.154/25,204.27.57.154/25,204.27.57.210/25,204.27.57.210/25,204.27.57.210/25,204.27.57.210/25,204.27.57.210/25,204.27.57.210/25,204.27.57.210/25,204.27.57.210/25,204.27.57.210/25,204.27.57.210/25,204.27.57.210/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400097; rev:2307;) drop ip [204.27.57.210/25,218.25.203.5/25,64.191.44.5/25,64.191.44.5/25,64.191.44.5/25,64.191.44.5/25,64.191.44.5/25,64.191.44.5/25,76.73.86.26/25,203.117.91.74/25,193.104.27.211/25,193.104.27.171/25,193.104.27.211/25,193.104.27.211/25,213.163.91.237/25,193.104.27.171/25,193.104.27.211/25,193.104.27.171/25,193.104.27.171/25,193.104.27.139/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400098; rev:2307;) drop ip [193.104.27.171/25,193.104.27.211/25,193.104.27.211/25,213.163.91.237/25,193.104.27.171/25,193.104.27.211/25,193.104.27.171/25,193.104.27.171/25,193.104.27.139/25,66.197.168.21/25,193.104.27.171/25,193.104.27.171/25,193.104.41.5/25,66.197.168.21/25,193.104.27.171/25,193.104.27.171/25,93.158.114.111/25,213.163.89.54/25,204.27.57.210/25,208.81.197.100/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:240400099; rev:2307;) drop ip [67.215.238.195/25,67.215.238.195/25,91.213.126.112/25,91.213.126.112/25,91.213.126.112/25,203.117.91.74/25,193.104.27.171/25,193.104.27.211/25,193.104.27.211/25,193.104.27.211/25,193.104.27.211/25,193.104.27.211/25,66.197.168.21/25,193.104.41.5/25,66.197.168.21/25,66.197.240.165/25,66.197.168.21/25,74.200.69.178/25,193.104.27.211/25,213.163.91.237/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000100; rev:2307;) drop ip [193.104.27.211/25,193.104.27.211/25,193.104.27.139/25,193.104.27.211/25,213.163.91.237/25,193.104.27.82/25,193.104.27.211/25,193.104.27.211/25,193.104.27.139/25,66.197.168.21/25,95.211.8.217/25,193.104.27.227/25,193.104.27.227/25,66.197.168.21/25,203.117.91.74/25,93.190.141.176/25,193.104.27.98/25,203.117.91.74/25,193.104.27.98/25,193.104.27.82/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000101; rev:2307;) drop ip [203.117.91.74/25,193.104.27.98/25,217.145.83.229/25,217.145.83.229/25,94.142.133.125/25,193.104.27.227/25,200.106.149.171/25,98.25.131.170/25,95.211.8.217/25,213.108.56.140/25,193.169.13.24/25,213.239.216.166/25,63.251.135.15/25,74.86.210.134/25,201.134.249.164/25,201.134.249.164/25,222.103.205.149/25,213.239.216.166/25,213.239.216.166/25,193.169.13.24/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000102; rev:2307;) drop ip [193.104.27.98/25,193.104.27.171/25,190.183.61.41/25,190.3.183.11/25,83.149.112.96/25,91.200.164.10/25,63.251.135.15/25,193.104.27.171/25,83.149.112.96/25,66.197.168.21/25,66.197.168.21/25,193.104.27.171/25,91.212.198.234/25,95.169.190.208/25,189.73.92.40/25,91.207.4.19/25,193.104.22.100/25,193.104.22.100/25,193.104.22.100/25,193.104.22.100/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000103; rev:2307;) drop ip [193.104.22.100/25,193.104.22.100/25,193.104.22.100/25,91.213.94.131/25,193.104.27.212/25,193.104.27.212/25,193.104.27.212/25,91.201.29.123/25,91.201.29.123/25,91.201.29.123/25,91.201.29.123/25,91.201.29.110/25,91.201.29.110/25,91.212.198.234/25,77.91.50.156/25,193.104.27.171/25,193.104.27.171/25,92.241.190.70/25,92.241.190.70/25,92.241.190.70/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000104; rev:2307;) drop ip [92.241.190.70/25,204.27.57.154/25,64.191.44.5/25,91.201.28.3/25,193.104.27.54/25,193.104.41.132/25,91.201.28.3/25,193.104.27.54/25,93.186.164.168/25,93.186.164.168/25,91.201.28.3/25,93.186.164.168/25,213.133.100.58/25,109.123.70.97/25,109.123.70.97/25,91.201.28.3/25,193.104.41.132/25,193.104.27.54/25,83.170.112.189/25,91.201.28.35/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000105; rev:2307;) drop ip [91.201.28.35/25,91.201.28.35/25,91.201.28.35/25,91.201.28.35/25,91.201.28.35/25,193.104.27.212/25,193.104.27.212/25,202.142.20.244/25,91.201.28.3/25,91.201.28.3/25,193.104.27.139/25,193.104.27.139/25,193.104.27.139/25,193.104.27.139/25,99.252.252.73/25,97.82.228.202/25,69.207.205.78/25,67.191.244.53/25,98.250.35.45/25,24.214.240.118/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000106; rev:2307;) drop ip [74.69.3.103/25,67.160.209.193/25,216.240.246.162/25,216.240.246.162/25,216.240.246.162/25,122.115.63.11/25,80.15.27.3/25,91.200.164.28/25,122.115.63.11/25,80.15.27.3/25,91.200.164.28/25,91.201.28.35/25,68.142.1.101/25,91.201.28.35/25,91.201.28.35/25,91.201.28.35/25,91.201.28.35/25,88.191.40.235/25,91.201.28.35/25,91.201.28.35/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000107; rev:2307;) drop ip [200.106.149.171/25,91.201.28.35/25,91.201.28.35/25,115.100.250.75/25,91.200.164.28/25,80.15.27.3/25,122.115.63.11/25,212.117.165.211/25,93.190.141.13/25,67.215.251.214/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000108; rev:2307;) drop ip [66.96.221.101/25,98.126.74.156/25,98.126.74.156/25,98.126.74.156/25,98.126.74.156/25,98.126.74.156/25,98.126.74.156/25,98.126.74.156/25,98.126.74.156/25,195.189.247.101/25,193.104.27.11/25,61.4.82.212/25,61.4.82.212/25,61.4.82.212/25,92.241.168.207/25,92.241.168.207/25,115.100.250.81/25,115.100.250.81/25,115.100.250.81/25,193.104.27.11/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000109; rev:2307;) drop ip [193.104.27.11/25,64.191.44.5/25,64.191.44.5/25,64.191.44.5/25,64.191.44.5/25,64.191.44.5/25,64.191.44.5/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000110; rev:2307;) drop ip [66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,200.63.46.116/25,200.63.46.116/25,200.63.46.116/25,209.172.57.234/25,193.104.27.98/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000111; rev:2307;) drop ip [66.96.219.101/25,85.10.206.114/25,66.96.219.101/25,92.241.168.217/25,66.96.219.101/25,85.10.206.114/25,92.241.168.217/25,92.241.168.207/25,193.105.0.11/25,193.105.0.11/25,193.105.0.11/25,93.174.93.137/25,109.95.114.254/25,109.95.114.254/25,109.95.114.254/25,115.100.250.86/25,109.123.70.97/25,91.201.28.3/25,91.201.28.35/25,91.201.28.3/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000112; rev:2307;) drop ip [91.200.164.28/25,91.200.164.28/25,91.201.28.3/25,91.201.28.3/25,92.241.168.217/25,115.100.250.86/25,193.104.27.110/25,193.104.27.110/25,193.104.27.110/25,91.201.28.3/25,206.41.117.254/25,91.201.28.3/25,206.41.117.254/25,115.100.250.86/25,216.86.153.116/25,216.86.153.116/25,216.86.153.116/25,115.100.250.86/25,122.115.63.23/25,122.115.63.23/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000113; rev:2307;) drop ip [122.115.63.23/25,174.36.158.26/25,174.36.158.26/25,193.104.27.110/25,96.9.188.23/25,96.9.188.23/25,146.164.20.136/25,200.199.242.22/25,200.93.128.210/25,210.205.6.168/25,210.205.6.168/25,210.205.6.168/25,69.162.92.85/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000114; rev:2307;) drop ip [91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,91.201.28.6/25,195.88.190.36/25,193.105.0.91/25,193.105.0.91/25,193.105.0.91/25,193.105.0.41/25,193.105.0.41/25,193.105.0.41/25,94.76.194.116/25,94.76.194.116/25,212.117.165.211/25,109.95.115.36/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000115; rev:2307;) drop ip [109.95.115.36/25,109.95.115.36/25,109.95.115.36/25,109.95.115.36/25,91.201.28.3/25,91.201.28.3/25,91.201.28.37/25,91.201.28.37/25,91.201.28.37/25,109.95.115.35/25,109.95.115.35/25,109.95.115.35/25,109.95.115.35/25,109.95.115.35/25,115.100.250.87/25,115.100.250.87/25,115.100.250.87/25,85.17.138.60/25,85.17.138.60/25,85.17.138.60/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000116; rev:2307;) drop ip [89.149.242.16/25,89.149.242.16/25,193.105.0.8/25,193.104.22.62/25,193.104.22.62/25,193.104.22.62/25,193.104.22.62/25,193.104.22.62/25,193.104.22.62/25,94.75.234.35/25,95.211.1.173/25,193.104.27.110/25,193.104.27.110/25,109.123.70.97/25,109.123.70.97/25,124.217.229.48/25,124.217.229.48/25,193.104.27.110/25,193.104.27.218/25,193.104.27.218/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000117; rev:2307;) drop ip [91.200.164.26/25,91.200.164.29/25,91.201.28.3/25,91.201.28.3/25,91.201.28.3/25,91.201.28.3/25,91.201.28.37/25,91.201.28.37/25,91.201.28.37/25,91.201.28.37/25,91.201.28.37/25,91.201.28.37/25,91.201.28.37/25,91.201.28.37/25,62.193.242.95/25,62.193.242.95/25,62.193.242.95/25,193.105.0.42/25,193.105.0.42/25,193.105.0.42/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000118; rev:2307;) drop ip [193.104.27.139/25,195.88.190.36/25,83.133.122.160/25,85.17.136.139/25,85.17.136.139/25,85.17.136.139/25,85.17.136.139/25,193.104.27.218/25,91.200.164.29/25,115.100.250.87/25,193.104.27.86/25,173.212.200.50/25,87.242.115.123/25,87.242.115.123/25,87.242.115.123/25,87.242.115.123/25,193.104.27.109/25,193.104.27.110/25,188.165.201.16/25,188.165.201.16/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000119; rev:2307;) drop ip [115.100.250.88/25,115.100.250.88/25,115.100.250.88/25,193.104.27.109/25,193.104.27.109/25,193.104.27.109/25,193.104.27.109/25,193.105.0.81/25,193.105.0.81/25,193.105.0.81/25,94.75.228.245/25,94.75.228.245/25,94.75.228.245/25,94.75.228.245/25,74.86.216.78/25,83.170.112.189/25,91.201.196.37/25,91.201.196.37/25,91.201.196.37/25,109.95.115.36/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000120; rev:2307;) drop ip [109.95.115.36/25,109.95.115.36/25,109.95.115.36/25,109.95.115.36/25,109.95.115.36/25,87.242.115.123/25,91.201.196.38/25,91.212.226.183/25,193.104.22.90/25,193.105.0.14/25,193.105.0.14/25,193.105.0.14/25,193.105.0.31/25,193.105.0.31/25,193.105.0.31/25,193.105.0.51/25,193.105.0.51/25,193.105.0.51/25,193.105.0.61/25,193.105.0.61/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000121; rev:2307;) drop ip [193.105.0.92/25,193.105.0.92/25,193.105.0.92/25,62.193.230.10/25,62.193.230.10/25,62.193.230.10/25,91.201.196.76/25,89.149.254.182/25,195.88.190.36/25,64.191.44.8/25,64.191.44.8/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,66.96.221.101/25,195.88.190.36/25,91.201.196.76/25,91.201.196.34/25,84.111.43.88/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000122; rev:2307;) drop ip [130.160.86.220/25,76.123.62.208/25,76.123.62.208/25,76.123.62.208/25,76.123.62.208/25,76.123.62.208/25,76.123.62.208/25,76.123.62.208/25,81.218.225.143/25,84.108.39.72/25,84.108.39.72/25,84.111.43.88/25,84.111.43.88/25,84.111.43.88/25,84.111.43.88/25,84.111.43.88/25,84.111.43.88/25,84.111.43.88/25,84.228.136.89/25,98.213.171.156/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000123; rev:2307;) drop ip [193.104.27.110/25,62.233.84.85/25,62.233.84.85/25,91.201.196.38/25,193.104.94.96/25,193.104.94.96/25,91.201.196.38/25,193.104.94.96/25,193.104.94.96/25,91.201.196.37/25,91.201.196.37/25,91.201.196.37/25,91.201.196.37/25,200.110.130.210/25,200.110.130.210/25,200.110.130.210/25,200.110.130.210/25,78.159.120.151/25,193.111.49.3/25,195.88.190.36/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000124; rev:2307;) drop ip [115.100.250.119/25,115.100.250.119/25,115.100.250.119/25,91.201.196.75/25,91.201.196.35/25,193.219.5.200/25,95.143.192.198/25,91.201.196.101/25,91.201.196.101/25,91.201.196.101/25,91.201.196.101/25,91.201.196.101/25,91.201.196.101/25,115.100.250.81/25,193.219.5.200/25,193.219.5.200/25,91.201.196.101/25,89.149.254.134/25,89.149.254.134/25,91.201.196.77/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000125; rev:2307;) drop ip [89.28.13.212/25,195.5.161.101/25,193.105.0.82/25,193.105.0.82/25,193.105.0.82/25,89.149.254.134/25,109.232.225.31/25,109.232.225.31/25,91.212.132.241/25,95.143.192.38/25,109.232.225.28/25,195.189.246.35/25,195.78.108.22/25,89.248.174.95/25,83.170.112.218/25,92.60.177.238/25,92.60.177.238/25,124.217.229.237/25,91.201.196.37/25,195.242.161.111/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000126; rev:2307;) drop ip [96.9.38.182/25,91.201.196.99/25,91.201.196.76/25,91.201.196.37/25,76.74.238.75/25,193.105.0.43/25,91.201.196.37/25,188.72.243.79/25,96.9.38.182/25,91.201.196.99/25,91.201.196.76/25,91.201.196.37/25,76.74.238.75/25,193.105.0.43/25,83.170.112.218/25,91.201.196.38/25,91.201.196.38/25,91.201.196.77/25,109.123.80.245/25,193.104.41.134/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000127; rev:2307;) drop ip [91.201.196.38/25,193.105.0.15/25,193.105.0.15/25,193.105.0.15/25,193.105.0.52/25,193.105.0.52/25,193.105.0.52/25,193.105.0.62/25,193.105.0.62/25,193.105.0.62/25,93.190.137.180/25,93.190.137.180/25,91.206.201.222/25,91.206.201.222/25,91.206.201.222/25,91.206.201.222/25,91.214.44.12/25,213.163.89.54/25,118.103.210.148/25,118.103.210.148/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000128; rev:2307;) drop ip [130.160.86.220/25,130.160.86.220/25,130.160.86.220/25,130.160.86.220/25,24.98.229.30/25,24.98.229.30/25,62.249.102.53/25,68.61.221.230/25,69.47.32.230/25,69.47.32.230/25,69.47.32.230/25,69.47.32.230/25,69.47.32.230/25,69.47.32.230/25,69.47.32.230/25,69.47.32.230/25,74.203.223.7/25,74.203.223.7/25,74.203.223.7/25,74.204.138.74/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000129; rev:2307;) drop ip [76.123.62.208/25,76.123.62.208/25,76.123.62.208/25,84.108.198.143/25,84.108.198.143/25,84.108.198.143/25,84.108.242.34/25,84.108.39.72/25,84.108.39.72/25,84.108.39.72/25,98.235.240.245/25,98.235.240.245/25,98.235.240.245/25,98.235.240.245/25,98.235.240.245/25,98.235.240.245/25,98.235.240.245/25,98.254.232.74/25,217.23.14.25/25,217.23.14.25/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000130; rev:2307;) drop ip [95.143.192.38/25,195.88.190.44/25,59.151.37.103/25,193.105.0.93/25,193.105.0.93/25,193.105.0.93/25,115.100.250.88/25,115.100.250.88/25,115.100.250.88/25,95.143.192.38/25,91.201.28.43/25,91.201.28.43/25,91.201.28.43/25,91.201.28.43/25,91.201.28.43/25,91.201.28.43/25,91.201.28.43/25,91.201.28.43/25,91.201.28.43/25,91.201.28.43/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000131; rev:2307;) drop ip [91.201.28.43/25,91.201.28.43/25,91.201.28.43/25,91.201.28.43/25,91.201.28.43/25,91.212.127.252/25,173.212.228.196/25,109.123.80.245/25,188.72.243.79/25,174.36.158.26/25,91.201.196.98/25,91.201.196.76/25,91.201.196.76/25,91.201.196.76/25,195.88.190.36/25,195.88.190.36/25,195.5.161.120/25,125.214.65.244/25,193.105.0.21/25,193.105.0.21/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000132; rev:2307;) drop ip [193.105.0.83/25,193.105.0.83/25,193.105.0.83/25,193.105.0.44/25,193.105.0.44/25,193.105.0.44/25,193.105.0.32/25,193.105.0.32/25,193.105.0.32/25,193.105.0.130/25,193.105.0.130/25,193.105.0.130/25,193.105.0.94/25,193.105.0.94/25,193.105.0.94/25,91.201.196.76/25,91.201.196.76/25,92.60.177.242/25,95.143.192.35/25,95.143.192.35/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000133; rev:2307;) drop ip [193.105.0.16/25,193.105.0.16/25,193.105.0.16/25,77.245.61.232/25,77.245.61.232/25,193.104.22.71/25,193.104.22.71/25,91.207.7.121/25,91.201.196.76/25,91.201.196.76/25,193.104.27.218/25,193.104.27.218/25,115.100.250.82/25,115.100.250.82/25,115.100.250.82/25,125.214.65.244/25,83.170.93.113/25,74.63.78.3/25,91.201.196.100/25,91.201.196.100/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000134; rev:2307;) drop ip [91.201.196.100/25,91.201.196.100/25,91.201.196.100/25,193.104.22.122/25,193.104.22.124/25,193.104.22.125/25,193.104.22.126/25,193.104.22.127/25,193.104.22.128/25,193.104.22.129/25,193.104.22.130/25,193.104.22.131/25,193.104.22.132/25,193.104.22.133/25,193.104.22.134/25,193.104.22.135/25,193.104.22.136/25,193.104.22.137/25,193.104.22.138/25,193.104.22.139/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000135; rev:2307;) drop ip [193.104.22.142/25,188.40.22.176/25,91.201.196.107/25,91.201.196.106/25,91.201.196.107/25,193.105.0.201/25,193.105.0.201/25,193.105.0.201/25,91.201.196.100/25,91.201.196.100/25,202.157.171.207/25,91.201.196.37/25,202.157.171.207/25,91.201.196.37/25,91.201.196.37/25,91.201.196.37/25,91.201.196.77/25,91.201.196.77/25,91.201.196.38/25,91.201.196.38/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000136; rev:2307;) drop ip [76.74.238.75/25,121.188.91.69/25,121.188.91.69/25,88.191.62.92/25,193.105.0.17/25,193.105.0.17/25,193.105.0.17/25,67.223.226.120/25,67.223.226.120/25,67.223.226.120/25,67.223.226.120/25,67.223.226.120/25,74.63.216.74/25,74.63.216.74/25,212.117.183.11/25,67.222.153.170/25,209.172.59.129/25,193.105.0.131/25,193.105.0.131/25,193.105.0.131/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000137; rev:2307;) drop ip [193.105.0.84/25,193.105.0.84/25,91.201.196.100/25,202.157.171.207/25,193.105.0.22/25,193.105.0.22/25,193.105.0.22/25,193.105.0.54/25,193.105.0.54/25,193.105.0.54/25,81.177.32.32/25,91.201.196.76/25,91.201.196.76/25,91.201.196.77/25,94.75.228.245/25,94.75.228.245/25,94.75.228.245/25,89.149.254.141/25,89.149.254.141/25,91.207.192.72/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000138; rev:2307;) drop ip [89.149.244.173/25,89.149.244.173/25,89.149.254.182/25,89.149.254.182/25,91.201.196.37/25,91.201.196.37/25,91.201.196.38/25,193.105.0.70/25,193.105.0.70/25,193.105.0.70/25,193.105.0.95/25,193.105.0.95/25,193.105.0.95/25,193.105.0.33/25,193.105.0.33/25,193.105.0.33/25,188.124.7.247/25,188.124.7.247/25,188.124.7.247/25,95.143.192.161/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000139; rev:2307;) drop ip [193.105.0.210/25,193.105.0.210/25,193.105.0.210/25,89.149.254.182/25,92.60.177.238/25,193.105.0.85/25,193.105.0.85/25,193.105.0.85/25,122.115.63.32/25,122.115.63.32/25,124.217.230.39/25,188.72.220.181/25,188.72.220.181/25,188.72.220.181/25,195.242.161.111/25,91.201.196.37/25,91.201.196.37/25,91.201.196.38/25,91.201.196.76/25,91.201.196.76/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000140; rev:2307;) drop ip [91.201.196.76/25,91.201.196.76/25,91.201.196.76/25,91.201.196.77/25,91.201.196.77/25,91.201.196.77/25,95.143.192.35/25,95.143.192.35/25,188.124.15.228/25,95.143.192.161/25,193.105.0.23/25,193.105.0.23/25,193.105.0.23/25,193.105.0.202/25,193.105.0.202/25,193.105.0.202/25,193.105.0.96/25,193.105.0.96/25,193.105.0.96/25,92.60.177.232/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000141; rev:2307;) drop ip [193.105.0.101/25,193.105.0.101/25,193.105.0.211/25,193.105.0.211/25,193.105.0.211/25,195.242.161.111/25,95.143.192.35/25,193.105.0.71/25,193.105.0.71/25,193.105.0.71/25,98.126.17.138/25,93.183.203.67/25,114.207.112.169/25,114.207.112.169/25,67.19.135.58/25,69.167.139.78/25,89.248.162.197/25,72.14.183.71/25,72.14.183.71/25,72.14.183.71/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000142; rev:2307;) drop ip [91.212.41.79/25,91.212.41.80/25,96.31.74.8/25,96.31.74.8/25,96.31.74.8/25,96.31.74.8/25,96.31.74.8/25,96.31.74.8/25,96.31.74.8/25,96.31.74.8/25,96.31.74.8/25,96.31.74.8/25,96.31.74.8/25,96.31.74.8/25,98.126.136.82/25,98.126.136.82/25,88.198.61.232/25,93.183.203.67/25,200.63.44.91/25,200.63.44.91/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000143; rev:2307;) drop ip [91.213.157.11/25,188.124.11.11/25,93.186.127.25/25,124.217.254.200/25,124.217.254.200/25,124.217.254.200/25,124.217.254.200/25,195.242.161.111/25,85.10.140.184/25,85.10.140.184/25,85.10.140.184/25,91.201.196.37/25,91.201.196.37/25,91.201.196.38/25,218.240.28.50/25,218.240.28.50/25,124.217.230.39/25,217.23.14.25/25,217.23.14.25/25,217.23.14.25/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000144; rev:2307;) drop ip [92.60.177.252/25,92.60.177.252/25,91.212.41.79/25,91.212.41.80/25,193.105.184.147/25,91.198.109.19/25,93.183.203.67/25,93.183.203.67/25,78.159.120.195/25,83.139.194.168/25,200.110.130.210/25,67.19.135.58/25,67.19.135.58/25,124.217.254.200/25,124.217.239.26/25,188.124.3.232/25,67.23.176.109/25,89.248.162.197/25,70.39.92.187/25,173.203.102.8/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000145; rev:2307;) drop ip [193.148.47.89/25,88.198.61.232/25,93.186.127.93/25,92.241.164.192/25,92.241.164.192/25,88.198.61.232/25,88.198.61.232/25,88.198.61.232/25,91.188.59.21/25,109.196.143.88/25,109.196.143.88/25,193.148.47.89/25,91.212.41.80/25,91.212.41.79/25,91.212.41.79/25,83.170.112.218/25,91.212.127.3/25,91.212.41.79/25,91.212.41.79/25,91.212.41.79/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000146; rev:2307;) drop ip [91.212.41.79/25,91.212.41.79/25,91.212.41.79/25,91.212.41.79/25,91.212.41.79/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,88.198.61.233/25,60.31.144.2/25,208.18.143.18/25,91.212.41.87/25,84.19.161.62/25,208.43.146.98/25,95.211.87.211/25,193.148.47.43/25,95.211.87.211/25,193.148.47.43/25,200.110.156.48/25,200.110.156.48/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000147; rev:2307;) drop ip [66.199.248.138/25,66.199.248.138/25,83.170.83.1/25,83.170.83.1/25,83.170.83.1/25,83.170.83.1/25,89.187.51.14/25,95.211.87.211/25,85.10.206.114/25,62.233.106.123/25,62.233.106.123/25,62.233.106.123/25,89.187.51.12/25,89.187.51.12/25,89.187.51.12/25,193.148.47.43/25,193.148.47.43/25,200.110.130.210/25,75.127.113.58/25,75.127.113.58/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000148; rev:2307;) drop ip [119.255.23.50/25,83.170.83.1/25,208.43.146.98/25,95.211.87.211/25,66.199.231.218/25,213.151.118.89/25,213.151.118.89/25,213.151.118.89/25,213.151.118.89/25,213.151.118.89/25,193.148.47.43/25,193.148.47.43/25,193.148.47.43/25,193.148.47.43/25,91.212.41.99/25,91.212.41.99/25,66.197.237.165/25,66.197.237.165/25,66.197.237.165/25,193.251.182.46/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000149; rev:2307;) drop ip [96.9.139.213/25,96.9.139.213/25,173.192.16.197/25,89.248.174.23/25,93.186.127.85/25,93.186.127.85/25,93.186.127.85/25,92.60.177.243/25,92.60.177.243/25,92.60.177.243/25,92.60.177.243/25,92.60.177.243/25,88.198.61.232/25,89.149.254.17/25,64.191.22.21/25,64.191.22.21/25,119.255.23.52/25,119.255.23.52/25,119.255.23.52/25,119.255.23.52/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000150; rev:2307;) drop ip [216.45.59.34/25,92.241.164.192/25,93.174.93.149/25,91.207.6.134/25,217.23.14.107/25,217.23.14.107/25,217.23.14.107/25,217.23.14.106/25,217.23.14.106/25,217.23.14.106/25,217.23.14.108/25,217.23.14.108/25,217.23.14.108/25,217.23.14.109/25,217.23.14.109/25,217.23.14.109/25,217.23.14.110/25,217.23.14.110/25,217.23.14.110/25,217.23.14.111/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000151; rev:2307;) drop ip [217.23.14.111/25,89.248.174.22/25,89.248.174.22/25,109.196.143.61/25,69.73.173.254/25,69.73.173.254/25,69.73.173.254/25,74.54.17.82/25,89.248.174.23/25,193.148.47.43/25,66.199.178.205/25,119.255.23.50/25,119.255.23.50/25,91.188.59.21/25,91.188.59.21/25,91.188.59.21/25,91.188.59.21/25,89.149.244.208/25,89.149.242.16/25,89.149.242.16/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000152; rev:2307;) drop ip [78.159.121.57/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,91.188.59.21/25,91.188.59.21/25,125.133.6.5/25,66.228.121.136/25,124.217.230.39/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000153; rev:2307;) drop ip [109.196.143.61/25,78.140.15.82/25,92.60.177.253/25,92.60.177.253/25,67.23.176.116/25,67.23.176.116/25,91.188.59.50/25,91.188.59.50/25,91.188.59.50/25,91.188.59.60/25,195.78.108.100/25,94.76.194.116/25,220.191.224.3/25,220.191.224.3/25,222.219.29.81/25,200.87.100.6/25,202.38.97.217/25,200.87.100.6/25,76.73.89.130/25,76.73.88.202/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000154; rev:2307;) drop ip [119.255.23.8/25,119.255.23.8/25,119.255.23.8/25,62.75.152.79/25,64.186.131.206/25,64.186.131.206/25,64.186.131.206/25,193.148.47.43/25,193.148.47.43/25,91.212.41.99/25,94.102.58.150/25,96.0.203.114/25,174.36.82.177/25,195.149.74.40/25,195.149.74.40/25,208.53.183.124/25,89.149.223.138/25,94.76.194.116/25,212.252.32.69/25,89.248.174.23/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000155; rev:2307;) drop ip [109.196.143.61/25,74.52.90.50/25,76.76.98.194/25,76.76.98.194/25,76.76.98.194/25,76.76.98.194/25,109.196.143.61/25,210.19.202.202/25,210.19.202.202/25,94.102.58.148/25,93.186.127.67/25,193.169.219.67/25,193.169.219.67/25,193.169.219.73/25,193.169.219.73/25,193.169.219.74/25,193.169.219.74/25,193.169.219.78/25,193.169.219.78/25,193.169.219.79/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000156; rev:2307;) drop ip [193.169.219.80/25,193.169.219.80/25,193.169.219.81/25,193.169.219.81/25,193.169.219.83/25,193.169.219.83/25,193.169.219.84/25,193.169.219.84/25,193.169.219.85/25,193.169.219.85/25,119.255.23.54/25,109.196.143.61/25,79.135.152.101/25,95.143.193.60/25,93.186.127.76/25,93.186.127.75/25,62.90.136.251/25,188.124.5.142/25,188.124.5.140/25,195.149.74.40/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000157; rev:2307;) drop ip [195.149.74.40/25,195.149.74.40/25,203.121.145.46/25,203.157.202.2/25,193.86.3.170/25,69.85.25.34/25,91.211.117.108/25,85.15.231.77/25,85.15.231.77/25,85.15.231.77/25,205.234.243.220/25,205.234.243.220/25,205.234.243.220/25,205.234.243.220/25,119.255.23.50/25,119.255.23.50/25,84.19.161.62/25,78.140.15.82/25,89.149.254.17/25,174.120.21.216/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000158; rev:2307;) drop ip [61.185.44.19/25,61.185.44.19/25,91.212.41.80/25,91.212.41.80/25,91.212.41.80/25,66.135.32.245/25,70.84.137.9/25,77.221.153.180/25,38.108.110.162/25,38.108.110.162/25,38.108.110.162/25,79.171.22.154/25,79.171.22.153/25,91.206.31.8/25,188.124.16.96/25,188.124.16.96/25,83.170.83.150/25,83.170.83.150/25,91.213.157.32/25,193.43.134.14/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000159; rev:2307;) drop ip [193.43.134.14/25,193.43.134.78/25,193.43.134.78/25,193.43.134.78/25,93.186.127.201/25,188.124.3.196/25,188.124.3.195/25,93.186.127.71/25,212.150.123.100/25,212.150.123.101/25,91.188.59.181/25,92.241.190.171/25,92.241.190.171/25,92.241.190.171/25,91.188.59.50/25,78.140.15.82/25,91.188.59.50/25,85.20.18.226/25,119.255.23.41/25,91.212.41.79/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000160; rev:2307;) drop ip [91.212.41.80/25,193.43.134.50/25,193.43.134.50/25,188.72.230.143/25,188.72.230.143/25,203.113.173.23/25,203.113.173.23/25,192.220.110.228/25,203.113.173.23/25,188.124.16.96/25,91.188.59.60/25,87.98.218.204/25,87.98.218.204/25,91.188.59.184/25,89.149.226.186/25,89.149.226.186/25,188.124.16.96/25,188.124.16.96/25,88.198.61.232/25,91.188.59.184/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000161; rev:2307;) drop ip [220.73.137.115/25,87.98.218.204/25,87.98.218.204/25,114.207.112.169/25,114.207.112.169/25,114.207.112.169/25,220.90.213.158/25,109.196.143.61/25,161.139.193.187/25,161.139.193.187/25,89.187.37.106/25,93.183.203.104/25,93.186.117.19/25,94.102.48.217/25,188.124.16.96/25,188.72.216.89/25,188.72.216.90/25,188.72.216.91/25,188.72.216.92/25,188.72.216.93/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000162; rev:2307;) drop ip [188.72.216.95/25,188.72.216.150/25,188.72.216.151/25,188.72.216.152/25,188.72.216.153/25,188.72.216.154/25,188.72.216.155/25,188.72.216.156/25,188.72.216.157/25,188.72.216.158/25,188.72.216.159/25,188.72.216.184/25,188.72.216.185/25,188.72.216.186/25,188.72.216.187/25,188.72.216.188/25,91.188.59.187/25,91.188.59.186/25,109.196.143.75/25,67.228.137.169/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000163; rev:2307;) drop ip [67.228.137.171/25,217.23.11.79/25,217.23.11.79/25,217.23.11.79/25,217.23.11.79/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25,77.221.153.178/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000164; rev:2307;) drop ip [188.124.16.96/25,188.124.16.96/25,109.196.143.61/25,91.188.59.188/25,91.188.59.189/25,109.196.143.61/25,195.176.47.198/25,195.176.47.198/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25,89.149.254.17/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000165; rev:2307;) drop ip [91.188.59.190/25,91.188.59.191/25,81.183.212.241/25,91.188.59.192/25,91.188.59.21/25,91.188.59.166/25,202.51.29.246/25,207.58.189.97/25,207.58.189.97/25,207.58.189.98/25,207.58.189.98/25,195.78.108.230/25,195.242.161.206/25,91.188.59.193/25,188.124.16.95/25,219.235.2.198/25,72.52.142.23/25,72.52.142.24/25,195.78.108.230/25,81.183.212.241/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000166; rev:2307;) drop ip [95.154.192.45/25,95.154.192.45/25,95.154.192.45/25,95.154.192.45/25,190.120.238.149/25,89.248.160.192/25,89.248.160.192/25,89.248.160.192/25,216.24.165.2/25,79.125.23.237/25,109.196.143.61/25,91.188.59.195/25,81.183.212.241/25,81.183.212.241/25,187.45.196.5/25,91.188.59.26/25,91.188.59.169/25,91.188.59.170/25,91.188.59.180/25,91.188.59.196/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000167; rev:2307;) drop ip [91.188.59.71/25,91.188.59.73/25,210.19.202.202/25,59.21.85.250/25,84.19.161.102/25,84.19.161.102/25,84.19.161.102/25,84.19.161.102/25,91.188.59.198/25,91.188.59.199/25,188.124.16.137/25,188.124.16.137/25,188.124.16.137/25,91.216.3.142/25,91.216.3.142/25,217.23.14.74/25,217.23.14.74/25,217.23.14.74/25,217.23.14.74/25,195.242.161.138/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000168; rev:2307;) drop ip [195.242.161.138/25,91.188.60.64/25,193.43.134.126/25,193.43.134.126/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,194.8.250.91/25,91.188.59.206/25,202.96.106.6/25,71.0.121.105/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000169; rev:2307;) drop ip [202.96.106.6/25,193.43.134.50/25,64.32.27.149/25,86.55.211.56/25,86.55.211.56/25,86.55.211.56/25,86.55.211.56/25,94.102.52.38/25,194.8.250.43/25,194.8.250.160/25,69.197.135.92/25,69.197.135.92/25,91.188.60.70/25,188.72.216.185/25,208.98.42.75/25,208.98.42.75/25,208.98.42.75/25,217.23.7.21/25,92.48.69.177/25,205.234.171.116/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000170; rev:2307;) drop ip [195.78.108.231/25,62.122.75.233/25,62.122.75.234/25,62.122.75.235/25,62.122.75.236/25,62.122.75.237/25,62.122.75.238/25,62.122.75.239/25,62.122.75.240/25,62.122.75.250/25,62.122.75.251/25,62.122.75.252/25,188.138.56.138/25,188.138.56.174/25,188.138.56.174/25,188.138.56.174/25,188.138.56.174/25,91.216.3.27/25,91.216.3.174/25,91.216.3.174/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000171; rev:2307;) drop ip [91.216.3.173/25,91.216.3.172/25,91.216.3.172/25,91.216.3.171/25,91.216.3.171/25,91.216.3.170/25,91.216.3.170/25,91.216.3.170/25,91.216.3.171/25,91.216.3.172/25,91.216.3.173/25,91.216.3.174/25,91.216.3.170/25,91.216.3.171/25,91.216.3.172/25,91.216.3.173/25,91.216.3.174/25,95.9.76.156/25,95.9.76.156/25,91.216.3.170/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000172; rev:2307;) drop ip [91.216.3.172/25,91.216.3.173/25,91.216.3.174/25,91.216.3.170/25,91.216.3.171/25,91.216.3.172/25,91.216.3.173/25,91.216.3.174/25,116.127.121.27/25,91.213.174.115/25,91.213.174.115/25,124.217.230.39/25,194.8.250.153/25,91.216.3.170/25,91.216.3.171/25,91.216.3.172/25,91.216.3.173/25,91.216.3.174/25,91.216.3.170/25,91.216.3.171/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000173; rev:2307;) drop ip [91.216.3.173/25,91.216.3.174/25,91.216.3.170/25,91.216.3.171/25,91.216.3.172/25,91.216.3.173/25,91.216.3.174/25,91.216.3.170/25,91.216.3.171/25,91.216.3.172/25,91.216.3.173/25,91.216.3.174/25,91.216.3.78/25,91.216.3.78/25,66.90.97.7/25,66.90.97.7/25,66.90.97.7/25,89.238.165.212/25,92.241.190.121/25,92.241.190.121/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000174; rev:2307;) drop ip [91.216.3.174/25,91.216.3.174/25,91.216.3.173/25,91.216.3.174/25,91.216.3.173/25,91.216.3.173/25,91.216.3.173/25,91.216.3.172/25,91.216.3.172/25,91.216.3.172/25,91.216.3.172/25,91.216.3.171/25,91.216.3.171/25,91.216.3.171/25,91.216.3.171/25,91.216.3.170/25,91.216.3.170/25,91.216.3.170/25,193.43.134.126/25,91.216.3.170/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000175; rev:2307;) drop ip [64.79.86.30/25,64.79.86.29/25,64.79.86.28/25,64.79.86.26/25,64.79.86.27/25,85.12.46.122/25,195.88.144.79/25,85.12.60.10/25,85.12.60.10/25,85.12.60.10/25,193.105.174.42/25,193.105.174.42/25,193.105.174.42/25,193.105.174.42/25,193.105.174.42/25,91.216.3.27/25,222.217.221.24/25,222.217.221.26/25,222.217.221.27/25,222.217.221.26/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000176; rev:2307;) drop ip [222.217.221.27/25,222.217.221.24/25,222.217.221.26/25,222.217.221.27/25,87.118.81.150/25,87.118.81.150/25,87.118.81.150/25,87.118.81.150/25,188.65.73.170/25,92.241.190.104/25,92.241.190.104/25,92.241.190.104/25,88.255.156.80/25,88.255.156.80/25,88.255.156.80/25,92.241.190.104/25,91.216.3.108/25,91.216.3.108/25,88.255.156.81/25,88.255.156.81/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000177; rev:2307;) drop ip [92.63.104.117/25,92.63.104.117/25,92.63.104.117/25,92.63.104.117/25,77.78.239.5/25,77.78.239.6/25,77.78.239.7/25,77.78.239.8/25,77.78.239.9/25,77.78.239.10/25,77.78.239.11/25,77.78.239.12/25,77.78.239.13/25,77.78.239.14/25,77.78.239.15/25,77.78.239.16/25,77.78.239.17/25,77.78.239.18/25,77.78.239.19/25,77.78.239.20/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000178; rev:2307;) drop ip [77.78.239.22/25,77.78.239.23/25,77.78.239.24/25,77.78.239.25/25,77.78.239.26/25,77.78.239.27/25,77.78.239.28/25,77.78.239.29/25,77.78.239.30/25,77.78.239.31/25,77.78.239.32/25,77.78.239.33/25,77.78.239.34/25,77.78.239.35/25,77.78.239.36/25,77.78.239.37/25,77.78.239.38/25,77.78.239.39/25,77.78.239.40/25,77.78.239.2/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000179; rev:2307;) drop ip [178.63.221.91/25,178.63.221.91/25,91.188.60.146/25,91.188.60.147/25,91.188.60.80/25,91.188.60.81/25,194.8.250.157/25,194.8.250.158/25,195.242.161.206/25,149.75.207.31/25,213.155.31.112/25,213.155.31.112/25,95.211.89.140/25,91.216.3.170/25,188.65.74.166/25,188.65.74.167/25,188.65.74.168/25,188.65.74.169/25,188.65.74.170/25,93.174.93.91/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000180; rev:2307;) drop ip [95.211.130.101/25,95.211.130.101/25,91.216.3.227/25,91.216.3.229/25,91.216.3.228/25,91.216.3.227/25,91.216.3.229/25,91.216.3.230/25,91.216.3.230/25,91.216.3.226/25,91.216.3.228/25,91.216.3.226/25,91.216.3.230/25,91.216.3.230/25,72.55.130.208/25,69.73.186.10/25,77.78.239.66/25,77.78.239.66/25,91.216.3.142/25,94.75.205.229/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000181; rev:2307;) drop ip [193.105.207.21/25,84.19.161.46/25,84.19.161.46/25,84.19.161.46/25,84.19.161.46/25,216.18.219.210/25,216.18.219.210/25,113.11.194.174/25,113.11.194.174/25,124.217.230.40/25,91.207.192.23/25,174.34.135.37/25,174.34.135.37/25,174.34.135.37/25,193.105.207.25/25,193.105.207.25/25,193.43.134.126/25,193.43.134.30/25,193.43.134.46/25,77.78.239.45/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000182; rev:2307;) drop ip [77.78.239.45/25,91.216.11.210/25,91.216.11.210/25,91.216.11.211/25,91.216.11.211/25,91.216.11.212/25,91.216.11.212/25,91.216.11.213/25,91.216.11.213/25,91.216.11.214/25,91.216.11.214/25,91.188.60.161/25,91.188.60.161/25,69.73.186.10/25,76.76.98.250/25,188.127.248.235/25,91.216.11.202/25,91.216.11.202/25,193.43.134.30/25,91.216.11.171/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000183; rev:2307;) drop ip [174.34.135.37/25,174.34.135.37/25,174.34.135.37/25,89.187.53.197/25,69.73.186.10/25,190.2.61.161/25,91.216.11.122/25,91.216.11.171/25,82.98.231.31/25,91.216.11.202/25,91.216.11.202/25,91.216.11.202/25,94.76.208.194/25,91.195.118.56/25,193.46.211.59/25,193.46.211.59/25,97.74.112.176/25,97.74.112.176/25,194.110.67.62/25,113.11.194.179/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000184; rev:2307;) drop ip [78.159.112.66/25,195.78.108.177/25,204.45.58.2/25,208.53.183.20/25,193.46.211.59/25,91.188.60.165/25,91.188.60.165/25,91.188.60.165/25,91.216.3.27/25,95.211.89.141/25,72.51.38.248/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000185; rev:2307;) drop ip [93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,93.174.93.91/25,83.133.125.178/25,91.212.127.154/25,211.76.154.8/25,91.211.117.87/25,91.211.117.87/25,91.211.117.87/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000186; rev:2307;) drop ip [195.5.161.150/25,195.5.161.150/25,178.21.112.156/25,195.242.161.44/25,91.198.127.226/25,91.198.127.226/25,204.188.244.174/25,178.17.163.90/25,178.17.163.90/25,178.17.163.90/25,178.17.163.90/25,109.196.130.43/25,222.50.92.66/25,202.191.61.120/25,213.8.152.190/25,213.8.152.190/25,213.8.152.190/25,213.8.152.190/25,69.10.57.126/25,69.10.57.126/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000187; rev:2307;) drop ip [200.63.45.69/25,200.63.45.69/25,213.8.152.190/25,213.8.152.190/25,61.19.250.184/25,61.19.250.184/25,61.19.250.184/25,61.19.250.184/25,61.19.250.184/25,61.19.248.71/25,79.135.152.190/25,113.11.194.179/25,109.196.130.43/25,109.196.130.43/25,109.196.130.43/25,109.196.130.43/25,109.196.130.43/25,109.196.130.43/25,109.196.130.43/25,109.196.130.43/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000188; rev:2307;) drop ip [88.191.40.235/25,88.191.35.175/25,91.190.86.198/25,195.5.161.200/25,69.175.124.210/25,69.175.124.210/25,200.23.18.209/25,193.105.174.42/25,109.196.130.43/25,194.110.67.204/25,211.8.50.118/25,61.160.219.205/25,79.135.152.180/25,113.11.194.179/25,79.135.152.181/25,178.63.192.42/25,178.63.192.42/25,178.63.192.42/25,178.63.192.42/25,65.60.36.114/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000189; rev:2307;) drop ip [65.60.36.114/25,65.60.36.114/25,116.66.203.208/25,204.12.250.34/25,124.228.136.39/25,124.228.136.39/25,27.131.32.20/25,91.213.174.40/25,91.213.174.40/25,27.131.32.20/25,91.188.60.226/25,116.66.203.208/25,188.72.215.217/25,188.72.215.217/25,188.72.215.217/25,222.50.92.66/25,222.50.92.66/25,222.50.92.66/25,222.50.92.66/25,222.50.92.66/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000190; rev:2307;) drop ip [222.50.92.66/25,222.50.92.66/25,222.50.92.66/25,222.50.92.66/25,222.50.92.66/25,222.50.92.66/25,87.98.235.178/25,91.197.131.153/25,91.197.131.153/25,222.50.92.66/25,65.39.236.69/25,65.39.236.69/25,91.194.0.12/25,91.194.0.12/25,91.194.0.22/25,91.194.0.22/25,91.194.0.29/25,91.194.0.29/25,91.194.0.30/25,91.194.0.30/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000191; rev:2307;) drop ip [91.194.0.5/25,208.53.183.163/25,221.144.57.193/25,221.144.57.193/25,221.144.57.193/25,195.5.161.201/25,91.194.0.29/25,91.185.201.94/25,91.185.201.94/25,91.185.201.94/25,109.196.130.43/25,91.197.131.153/25,65.39.236.69/25,91.194.0.40/25,91.194.0.32/25,91.194.0.22/25,91.194.0.20/25,109.196.134.58/25,113.11.194.174/25,113.11.194.174/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000192; rev:2307;) drop ip [113.11.194.174/25,91.213.174.35/25,91.213.174.35/25,91.213.174.35/25,91.213.174.35/25,91.213.174.35/25,91.213.174.35/25,91.213.174.35/25,91.213.174.35/25,91.213.174.35/25,91.213.174.34/25,72.18.206.103/25,72.18.206.103/25,72.18.206.103/25,85.88.26.76/25,85.88.26.76/25,85.88.26.76/25,91.211.117.130/25,91.211.117.130/25,91.211.117.130/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000193; rev:2307;) drop ip [195.5.161.201/25,68.71.51.162/25,68.71.51.162/25,68.71.51.162/25,124.228.136.39/25,89.21.25.40/25,194.8.250.23/25,91.216.73.29/25,113.11.194.167/25,91.194.0.31/25,91.194.0.25/25,212.34.242.70/25,188.72.233.239/25,188.72.233.239/25,188.72.233.239/25,188.72.233.239/25,91.188.60.5/25,217.23.7.21/25,217.23.7.21/25,113.11.194.175/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000194; rev:2307;) drop ip [113.11.194.175/25,113.11.194.175/25,91.194.0.40/25,85.234.191.101/25,85.234.191.101/25,212.103.194.188/25,85.234.191.100/25,85.234.191.100/25,178.63.203.90/25,173.231.144.66/25,188.65.74.165/25,85.234.191.111/25,93.183.203.68/25,93.183.203.68/25,93.183.203.68/25,93.183.203.68/25,193.105.240.59/25,213.155.12.144/25,213.155.12.144/25,213.155.12.144/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000195; rev:2307;) drop ip [91.194.0.102/25,91.194.0.102/25,91.194.0.102/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,78.24.217.9/25,92.63.107.10/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000196; rev:2307;) drop ip [92.63.107.10/25,92.63.107.10/25,85.234.191.111/25,85.234.191.190/25,85.234.191.190/25,85.234.191.190/25,85.234.191.190/25,193.105.174.114/25,85.234.191.111/25,195.91.237.51/25,212.117.189.104/25,212.117.189.104/25,208.94.241.50/25,208.94.241.50/25,208.94.241.50/25,208.94.241.50/25,208.94.241.50/25,91.121.42.88/25,91.121.42.88/25,91.121.42.88/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000197; rev:2307;) drop ip [91.188.60.5/25,64.120.175.42/25,64.120.175.42/25,64.120.175.42/25,121.101.216.201/25,193.105.174.53/25,193.105.174.53/25,193.105.174.53/25,194.8.250.223/25,194.8.250.223/25,194.8.250.223/25,92.63.103.92/25,92.63.103.92/25,92.63.103.92/25,92.63.103.92/25,91.212.226.33/25,8.53.32.97/25,91.188.60.5/25,91.188.60.5/25,213.163.89.64/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000198; rev:2307;) drop ip [210.27.144.42/25,210.27.144.42/25,188.65.74.161/25,222.35.15.13/25,91.194.0.200/25,91.194.0.200/25,91.194.0.200/25,91.194.0.200/25,91.188.59.149/25,91.188.59.149/25,82.146.56.123/25,82.146.56.123/25,82.146.56.123/25,82.146.56.123/25,91.194.0.160/25,91.194.0.160/25,91.194.0.160/25,91.194.0.109/25,91.194.0.109/25,91.194.0.109/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000199; rev:2307;) drop ip [91.194.0.107/25,91.194.0.107/25,195.78.108.180/25,195.78.108.180/25,195.78.108.180/25,91.188.59.10/25,91.211.117.25/25,91.211.117.25/25,79.135.152.193/25,79.135.152.193/25,79.135.152.193/25,79.135.152.193/25,79.135.152.193/25,194.8.250.227/25,194.8.250.227/25,194.8.250.227/25,193.104.153.102/25,193.104.153.102/25,193.104.153.102/25,193.104.153.102/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000200; rev:2307;) drop ip [88.191.37.200/25,77.78.240.162/25,77.78.240.162/25,77.78.240.162/25,77.78.240.162/25,77.78.240.162/25,193.104.153.103/25,193.104.153.103/25,193.104.153.103/25,193.104.153.103/25,113.11.194.173/25,91.188.60.5/25,79.135.152.194/25,79.135.152.194/25,79.135.152.194/25,79.135.152.194/25,213.155.29.144/25,213.155.29.144/25,213.155.29.144/25,213.155.29.144/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000201; rev:2307;) drop ip [193.105.174.53/25,193.105.174.53/25,193.105.174.53/25,66.49.214.28/25,208.53.183.101/25,85.21.235.231/25,200.35.56.170/25,77.78.240.162/25,113.11.194.175/25,121.101.216.201/25,85.234.190.13/25,76.73.100.10/25,204.12.243.187/25,204.12.243.187/25,217.23.7.21/25,217.23.7.21/25,217.23.7.21/25,217.23.7.21/25,200.56.243.137/25,188.65.74.161/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000202; rev:2307;) drop ip [89.149.202.109/25,89.149.202.109/25,89.149.202.109/25,113.11.194.175/25,79.135.152.195/25,79.135.152.195/25,79.135.152.195/25,79.135.152.195/25,193.104.12.127/25,193.104.12.127/25,74.81.85.105/25,62.193.226.206/25,62.193.226.206/25,62.193.226.206/25,76.76.99.91/25,91.194.0.155/25,91.194.0.222/25,77.78.240.135/25,85.234.190.42/25,92.63.106.216/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000203; rev:2307;) drop ip [92.63.106.216/25,92.63.106.216/25,193.105.174.54/25,193.105.174.54/25,193.105.174.58/25,91.216.215.77/25,91.216.215.77/25,91.188.60.230/25,91.188.60.230/25,69.50.221.187/25,69.50.221.187/25,69.50.221.187/25,69.50.221.187/25,69.50.221.187/25,69.50.221.187/25,69.50.221.187/25,69.50.221.187/25,69.50.221.187/25,69.50.221.187/25,69.50.221.187/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000204; rev:2307;) drop ip [85.234.191.170/25,210.19.202.202/25,69.50.221.190/25,76.76.97.90/25,76.76.97.90/25,193.104.146.12/25,188.65.74.161/25,194.28.112.3/25,69.50.221.187/25,69.50.221.187/25,69.50.221.187/25,113.11.194.167/25,113.11.194.167/25,69.50.221.190/25,85.234.190.43/25,85.234.190.44/25,85.234.190.45/25,85.234.190.46/25,85.234.190.12/25,85.234.190.14/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000205; rev:2307;) drop ip [210.19.202.202/25,200.56.243.137/25,94.75.229.253/25,78.26.179.172/25,78.26.179.172/25,78.26.179.172/25,78.26.179.172/25,79.135.152.199/25,79.135.152.199/25,79.135.152.199/25,79.135.152.199/25,113.11.194.175/25,113.11.194.175/25,195.5.161.68/25,91.194.0.166/25,91.194.0.223/25,91.194.0.223/25,78.26.179.185/25,78.26.179.185/25,92.60.177.241/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000206; rev:2307;) drop ip [92.63.107.41/25,92.63.107.41/25,92.63.107.41/25,97.74.95.10/25,78.26.179.185/25,78.26.179.185/25,78.26.179.185/25,78.26.179.185/25,92.63.107.41/25,92.63.107.41/25,92.63.107.41/25,92.63.107.41/25,92.63.107.41/25,92.63.107.41/25,92.63.107.41/25,92.63.107.41/25,79.135.152.199/25,79.135.152.199/25,79.135.152.199/25,79.135.152.199/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000207; rev:2307;) drop ip [94.76.175.81/25,77.78.240.89/25,77.78.240.89/25,77.78.240.89/25,77.78.240.89/25,188.65.74.161/25,159.148.117.66/25,86.55.211.116/25,86.55.211.117/25,86.55.211.116/25,86.55.211.116/25,78.26.179.197/25,78.26.179.197/25,78.26.179.197/25,78.26.179.197/25,69.50.221.188/25,69.50.221.188/25,213.5.64.25/25,213.5.64.25/25,213.5.64.25/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000208; rev:2307;) drop ip [79.135.152.215/25,79.135.152.215/25,79.135.152.215/25,79.135.152.215/25,78.26.179.203/25,78.26.179.203/25,78.26.179.203/25,78.26.179.203/25,87.118.88.140/25,87.118.88.140/25,87.118.88.140/25,69.50.197.115/25,69.50.197.115/25,69.50.197.115/25,69.50.197.115/25,78.26.179.207/25,78.26.179.207/25,78.26.179.207/25,78.26.179.207/25,188.72.230.23/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000209; rev:2307;) drop ip [91.188.59.150/25,91.188.59.150/25,91.188.59.150/25,92.42.189.164/25,93.174.94.85/25,78.26.179.214/25,78.26.179.214/25,78.26.179.214/25,78.26.179.214/25,188.95.159.40/25,188.95.159.40/25,188.95.159.40/25,200.56.243.137/25,78.26.179.223/25,78.26.179.223/25,78.26.179.223/25,78.26.179.223/25,82.146.56.200/25,82.146.56.200/25,82.146.56.200/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000210; rev:2307;) drop ip [92.63.103.182/25,92.63.103.182/25,92.63.103.182/25,92.63.103.182/25,79.135.152.217/25,79.135.152.217/25,79.135.152.217/25,79.135.152.217/25,178.33.47.129/25,69.50.221.196/25,69.50.221.196/25,69.50.221.196/25,69.50.221.196/25,178.33.46.84/25,188.65.74.161/25,178.33.45.129/25,85.114.143.43/25,91.194.0.222/25,91.188.59.10/25,91.188.59.10/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000211; rev:2307;) drop ip [193.41.38.103/25,193.41.38.103/25,193.41.38.101/25,79.135.152.219/25,79.135.152.219/25,79.135.152.219/25,79.135.152.219/25,193.104.146.42/25,193.104.146.41/25,193.104.146.41/25,193.104.146.41/25,91.188.60.80/25,91.188.60.80/25,91.188.60.80/25,91.188.60.80/25,193.104.146.42/25,113.11.194.167/25,91.216.215.100/25,85.17.92.35/25,85.17.92.35/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000212; rev:2307;) drop ip [79.135.152.220/25,79.135.152.220/25,79.135.152.220/25,79.135.152.220/25,212.13.195.55/25,212.13.195.55/25,212.13.195.55/25,193.41.38.107/25,193.41.38.107/25,193.41.38.108/25,76.76.106.3/25,76.76.106.3/25,79.135.152.221/25,79.135.152.221/25,79.135.152.221/25,61.147.75.89/25,112.84.189.89/25,78.26.179.227/25,78.26.179.227/25,78.26.179.227/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000213; rev:2307;) drop ip [78.26.179.243/25,78.26.179.243/25,78.26.179.243/25,78.26.179.243/25,91.194.0.220/25,91.194.0.220/25,91.194.0.220/25,92.241.190.131/25,193.41.38.108/25,91.188.59.129/25,91.188.59.129/25,91.188.59.129/25,211.104.39.245/25,211.104.39.245/25,78.26.179.3/25,78.26.179.3/25,78.26.179.3/25,78.26.179.3/25,113.11.194.167/25,78.26.179.4/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000214; rev:2307;) drop ip [78.26.179.4/25,78.26.179.4/25,109.196.143.131/25,78.26.179.7/25,78.26.179.7/25,78.26.179.7/25,78.26.179.7/25,178.17.163.109/25,178.17.163.109/25,212.117.161.31/25,212.117.161.31/25,76.76.106.3/25,76.76.106.3/25,78.26.179.9/25,78.26.179.9/25,78.26.179.9/25,78.26.179.9/25,195.88.208.250/25,213.5.64.29/25,213.5.64.29/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000215; rev:2307;) drop ip [213.5.64.29/25,91.194.0.155/25,78.26.179.54/25,78.26.179.54/25,78.26.179.54/25,78.26.179.54/25,92.63.101.136/25,92.63.101.136/25,92.63.101.136/25,92.63.101.136/25,91.188.59.151/25,193.169.235.225/25,188.65.74.162/25,109.196.134.51/25,195.182.57.143/25,195.182.57.143/25,195.182.57.143/25,195.182.57.143/25,78.26.179.59/25,78.26.179.59/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000216; rev:2307;) drop ip [78.26.179.59/25,188.95.159.110/25,188.95.159.110/25,188.95.159.110/25,188.65.74.162/25,79.135.152.222/25,79.135.152.222/25,79.135.152.222/25,79.135.152.222/25,79.135.152.222/25,79.135.152.222/25,79.135.152.222/25,79.135.152.222/25,91.211.117.25/25,91.211.117.25/25,91.211.117.25/25,91.211.117.25/25,91.211.117.25/25,91.211.117.25/25,91.211.117.25/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000217; rev:2307;) drop ip [91.211.117.25/25,91.211.117.25/25,212.117.160.84/25,212.117.160.84/25,93.183.203.112/25,93.183.203.112/25,113.11.194.152/25,113.11.194.152/25,91.216.215.101/25,76.76.106.4/25,94.102.51.38/25,76.76.96.188/25,188.65.74.162/25,194.28.112.3/25,62.193.236.41/25,62.193.236.41/25,65.49.73.98/25,65.49.73.98/25,65.49.73.98/25,65.49.73.98/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000218; rev:2307;) drop ip [76.76.106.2/25,188.95.159.110/25,89.149.223.53/25,89.149.223.53/25,89.149.223.53/25,91.204.48.48/25,91.204.48.48/25,94.100.25.139/25,94.100.25.139/25,94.100.25.139/25,188.95.159.49/25,188.95.159.49/25,91.204.48.46/25,89.248.111.226/25,89.248.111.226/25,173.244.210.190/25,173.244.222.10/25,91.211.117.76/25,94.102.51.38/25,94.102.51.38/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000219; rev:2307;) drop ip [173.224.120.235/25,173.224.120.235/25,193.104.146.43/25,193.104.146.45/25,193.104.146.46/25,193.104.146.43/25,193.104.146.45/25,193.104.146.46/25,80.91.191.185/25,80.91.191.185/25,193.104.146.49/25,85.234.191.201/25,85.234.191.201/25,85.234.191.201/25,85.234.191.201/25,178.86.2.16/25,95.142.163.184/25,193.105.207.151/25,91.211.117.76/25,94.102.51.38/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000220; rev:2307;) drop ip [85.234.191.203/25,85.234.191.203/25,85.234.191.203/25,193.104.146.49/25,204.12.216.50/25,178.17.163.108/25,178.17.163.108/25,178.17.163.108/25,195.3.145.182/25,195.3.145.182/25,195.3.145.182/25,188.95.159.110/25,200.63.45.14/25,200.56.243.137/25,85.234.191.206/25,85.234.191.206/25,85.234.191.206/25,85.234.191.206/25,91.216.215.101/25,70.86.83.194/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000221; rev:2307;) drop ip [78.24.219.9/25,78.24.219.9/25,78.24.219.9/25,213.155.17.72/25,188.120.226.8/25,193.169.13.206/25,193.169.13.206/25,193.105.174.58/25,200.56.243.137/25,200.56.243.137/25,193.41.38.121/25,74.63.78.56/25,74.63.78.56/25,74.63.78.56/25,74.63.78.56/25,195.226.197.100/25,195.226.197.100/25,195.226.197.24/25,85.234.191.208/25,85.234.191.208/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000222; rev:2307;) drop ip [85.234.191.208/25,109.104.83.195/25,109.104.83.195/25,109.104.83.195/25,193.41.38.111/25,193.41.38.112/25,193.41.38.222/25,193.41.38.222/25,195.226.197.100/25,195.226.197.100/25,85.234.191.174/25,193.104.146.45/25,193.41.38.122/25,193.41.38.212/25,85.234.191.210/25,85.234.191.210/25,92.241.190.32/25,188.65.74.163/25,82.146.62.58/25,82.146.62.58/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000223; rev:2307;) drop ip [85.234.191.211/25,209.51.205.89/25,209.51.205.89/25,209.51.205.89/25,178.63.2.21/25,91.211.117.76/25,193.104.153.101/25,193.104.153.103/25,193.104.153.103/25,195.226.197.47/25,195.226.197.47/25,86.55.243.12/25,69.64.50.78/25,89.209.91.49/25,89.209.91.49/25,89.209.91.49/25,69.64.50.78/25,193.201.192.82/25,193.201.192.82/25,193.104.153.101/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000224; rev:2307;) drop ip [193.104.153.104/25,188.95.159.52/25,188.95.159.52/25,195.226.197.100/25,195.226.197.100/25,195.226.197.24/25,213.155.23.160/25,95.143.195.40/25,195.189.226.107/25,82.146.61.201/25,205.234.197.126/25,193.41.38.54/25,193.41.38.55/25,109.196.143.131/25,195.226.197.24/25,195.226.197.24/25,188.127.227.77/25,193.104.153.101/25,193.41.38.221/25,222.103.205.149/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000225; rev:2307;) drop ip [193.201.192.82/25,83.133.122.54/25,85.234.191.195/25,195.3.145.182/25,195.3.145.182/25,195.3.145.182/25,109.196.143.131/25,62.193.236.41/25,62.193.236.41/25,62.193.236.41/25,62.193.236.41/25,195.226.197.49/25,188.127.225.58/25,178.63.152.229/25,95.143.195.42/25,91.204.48.46/25,91.204.48.46/25,188.65.74.163/25,109.196.143.135/25,91.204.48.46/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000226; rev:2307;) drop ip [91.204.48.46/25,76.76.106.5/25,188.65.74.163/25,213.5.64.190/25,204.12.237.196/25,64.120.144.88/25,91.211.117.146/25,91.211.117.76/25,195.226.197.50/25,195.226.197.50/25,109.196.143.133/25,109.196.143.133/25,94.63.240.142/25,193.105.207.130/25,193.23.126.40/25,193.41.38.65/25,174.37.194.158/25,193.41.38.61/25,200.74.241.96/25,195.226.197.50/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000227; rev:2307;) drop ip [195.226.197.48/25,213.5.64.193/25,193.41.38.222/25,217.23.5.7/25,217.23.5.7/25,217.23.5.7/25,195.234.124.27/25,193.178.172.60/25,193.178.172.60/25,193.41.38.62/25,193.41.38.63/25,77.78.233.131/25,77.78.233.131/25,77.78.233.131/25,78.26.187.61/25,78.26.187.61/25,78.26.187.60/25,92.60.177.235/25,193.41.38.71/25,193.41.38.76/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000228; rev:2307;) drop ip [66.79.185.187/25,66.79.185.187/25,77.78.240.211/25,77.78.240.211/25,77.78.240.211/25,77.78.240.211/25,193.178.172.60/25,195.226.197.50/25,193.178.172.60/25,193.178.172.60/25,180.69.254.230/25,91.217.249.160/25,109.196.134.40/25,213.5.64.193/25,69.64.63.220/25,77.78.240.89/25,193.178.172.59/25,69.50.213.106/25,195.226.197.51/25,188.95.159.100/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000229; rev:2307;) drop ip [195.226.197.100/25,193.104.146.77/25,193.104.146.77/25,193.104.146.77/25,91.217.162.141/25,213.5.64.194/25,195.226.197.100/25,195.226.197.100/25,78.26.187.38/25,78.26.187.38/25,193.41.38.104/25,193.41.38.104/25,193.41.38.102/25,92.60.177.244/25,89.209.91.49/25,89.209.91.49/25,78.26.187.39/25,109.196.134.40/25,188.95.159.128/25,188.95.159.128/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000230; rev:2307;) drop ip [91.217.162.176/25,122.225.107.72/25,122.225.107.72/25,213.5.64.195/25,193.178.172.55/25,193.178.172.55/25,194.8.250.62/25,91.217.249.136/25,200.63.44.192/25,200.63.44.192/25,193.27.232.50/25,193.41.38.143/25,193.41.38.144/25,195.234.124.32/25,213.155.12.144/25,213.155.12.144/25,213.155.12.144/25,213.155.12.144/25,213.155.12.144/25,213.155.12.144/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000231; rev:2307;) drop ip [213.155.12.144/25,213.155.12.144/25,109.196.143.136/25,109.196.143.137/25,78.26.187.41/25,92.60.177.246/25,77.120.109.24/25,77.120.109.24/25,114.203.87.195/25,121.254.145.212/25,204.45.48.15/25,209.135.132.50/25,209.135.132.50/25,209.135.132.50/25,128.134.30.87/25,128.134.30.87/25,92.60.177.236/25,91.217.162.158/25,217.23.4.58/25,217.23.4.58/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000232; rev:2307;) drop ip [195.226.197.51/25,195.226.197.27/25,195.226.197.27/25,80.24.67.44/25,93.190.41.8/25,78.26.187.45/25,78.26.187.45/25,78.26.187.45/25,78.26.187.45/25,69.50.208.164/25,78.26.187.44/25,78.26.187.44/25,91.217.249.138/25,188.120.225.116/25,188.120.225.116/25,195.226.197.51/25,69.50.195.232/25,91.207.182.55/25,195.234.124.35/25,95.163.17.27/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000233; rev:2307;) drop ip [193.178.172.33/25,193.178.172.83/25,193.178.172.83/25,184.105.235.89/25,184.105.235.91/25,184.105.235.91/25,184.105.235.91/25,92.38.225.189/25,92.38.225.189/25,195.234.124.35/25,195.234.124.35/25,195.234.124.35/25,88.191.20.205/25,188.212.110.141/25,188.212.110.141/25,194.1.220.48/25,194.1.220.48/25,194.1.220.48/25,78.26.187.47/25,78.26.187.47/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000234; rev:2307;) drop ip [193.107.16.102/25,194.1.220.142/25,194.1.220.142/25,109.196.143.136/25,109.196.143.136/25,109.196.134.28/25,91.213.174.46/25,91.213.174.46/25,220.110.138.52/25,193.178.172.53/25,193.178.172.53/25,201.76.178.58/25,201.76.178.58/25,201.76.178.58/25,203.157.204.2/25,194.1.220.43/25,91.217.162.228/25,213.5.64.196/25,204.45.55.121/25,78.26.187.163/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000235; rev:2307;) drop ip [210.124.107.3/25,91.207.182.56/25,184.154.8.92/25,184.154.8.92/25,184.154.8.92/25,109.196.143.136/25,109.196.143.137/25,109.196.134.39/25,213.5.65.208/25,213.5.65.208/25,213.5.65.208/25,76.76.98.194/25,76.76.98.194/25,208.87.32.36/25,193.23.126.40/25,193.23.126.40/25,89.149.226.195/25,189.108.44.42/25,222.24.94.19/25,202.38.97.217/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000236; rev:2307;) drop ip [91.213.174.44/25,62.26.158.143/25,62.26.158.143/25,98.158.178.231/25,91.213.174.10/25,69.197.135.51/25,91.213.174.6/25,91.213.174.10/25,91.213.174.44/25,91.213.174.6/25,91.213.174.10/25,91.213.174.44/25,91.213.174.44/25,91.213.174.44/25,91.213.174.10/25,91.213.174.10/25,91.213.174.6/25,91.213.174.6/25,69.197.135.51/25,91.207.182.50/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000237; rev:2307;) drop ip [91.207.182.50/25,212.124.127.7/25,212.124.127.7/25,69.50.209.170/25,212.124.127.8/25,212.124.127.8/25,211.234.117.132/25,94.244.1.205/25,94.244.1.205/25,89.187.50.226/25,89.187.50.226/25,195.234.124.40/25,91.217.249.139/25,69.197.135.51/25,193.178.172.76/25,69.50.197.68/25,91.213.217.91/25,195.3.144.196/25,89.187.50.229/25,78.26.187.171/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000238; rev:2307;) drop ip [78.26.187.171/25,78.26.187.171/25,91.217.162.239/25,69.50.209.109/25,195.226.197.52/25,195.226.197.52/25,212.124.127.9/25,212.124.127.9/25,194.88.11.48/25,194.88.11.48/25,194.88.11.48/25,193.178.172.77/25,193.178.172.77/25,193.178.172.77/25,195.80.151.91/25,46.29.252.134/25,213.5.64.197/25,193.178.172.82/25,193.178.172.82/25,116.255.180.231/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000239; rev:2307;) drop ip [78.26.187.172/25,78.26.187.172/25,173.244.194.236/25,178.208.77.185/25,178.208.77.185/25,178.208.77.185/25,211.234.117.47/25,210.124.107.3/25,67.21.76.6/25,67.21.76.6/25,91.217.249.81/25,91.217.249.81/25,213.5.64.197/25,212.124.127.10/25,212.124.127.10/25,188.72.221.31/25,188.72.221.31/25,188.72.221.31/25,78.26.187.174/25,78.26.187.174/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000240; rev:2307;) drop ip [78.26.187.174/25,193.107.172.11/25,193.107.172.11/25,91.207.182.56/25,91.217.162.199/25,69.50.202.16/25,75.147.219.202/25,195.226.197.10/25,195.226.197.10/25,92.241.174.38/25,92.241.174.38/25,92.241.174.38/25,92.241.174.38/25,208.87.242.18/25,208.87.242.18/25,208.87.242.18/25,116.255.180.231/25,116.255.180.231/25,61.57.227.5/25,61.57.227.5/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000241; rev:2307;) drop ip [194.0.245.78/25,194.0.245.78/25,195.234.124.41/25,204.93.197.108/25,204.93.197.108/25,204.93.197.108/25,91.217.249.93/25,213.5.64.222/25,213.5.64.222/25,193.107.172.11/25,193.107.172.11/25,125.141.196.59/25,125.141.196.59/25,62.109.12.139/25,62.109.12.139/25,193.23.126.33/25,193.23.126.33/25,91.217.249.93/25,76.76.115.106/25,76.76.115.110/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000242; rev:2307;) drop ip [69.50.202.18/25,62.109.12.140/25,62.109.12.140/25,188.40.87.88/25,62.109.12.141/25,62.109.12.141/25,173.192.136.92/25,173.192.136.92/25,78.26.187.177/25,78.26.187.177/25,178.162.229.52/25,194.63.144.146/25,194.63.144.146/25,194.63.144.146/25,208.76.54.216/25,173.244.194.237/25,173.244.194.237/25,178.162.229.52/25,75.151.251.213/25,75.151.251.213/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000243; rev:2307;) drop ip [71.7.3.60/25,71.7.3.60/25,220.128.152.141/25,209.216.193.107/25,178.216.50.137/25,78.26.187.178/25,78.26.187.178/25,91.193.192.90/25,91.193.192.90/25,89.187.50.195/25,89.187.50.195/25,78.26.187.180/25,78.26.187.180/25,110.45.136.181/25,116.122.158.183/25,71.41.50.46/25,71.7.3.60/25,71.41.50.46/25,173.244.192.245/25,78.26.187.181/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000244; rev:2307;) drop ip [91.212.158.52/25,46.29.252.71/25,188.72.240.219/25,91.213.29.24/25,91.213.29.24/25,91.217.162.230/25,91.217.162.230/25,91.217.162.230/25,91.217.162.80/25,91.217.162.80/25,91.217.162.80/25,69.50.210.48/25,80.91.191.158/25,194.247.58.96/25,194.247.58.95/25,193.186.9.81/25,95.169.186.126/25,208.76.54.224/25,67.21.76.33/25,67.21.76.33/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000245; rev:2307;) drop ip [186.202.16.186/25,92.241.164.70/25,92.241.164.70/25,195.242.182.30/25,46.17.101.2/25,217.23.11.215/25,217.23.11.215/25,217.23.11.215/25,62.109.23.18/25,62.109.23.18/25,82.146.47.58/25,82.146.47.58/25,82.146.47.58/25,195.234.124.44/25,91.213.29.27/25,91.213.29.27/25,91.193.192.90/25,91.193.192.90/25,91.193.192.90/25,91.200.240.7/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000246; rev:2307;) drop ip [91.200.240.7/25,178.63.248.98/25,178.63.248.98/25,188.127.229.180/25,46.29.254.153/25,195.234.124.45/25,78.24.216.8/25,78.24.216.8/25,195.80.151.59/25,91.204.48.128/25,91.204.48.128/25,46.29.254.154/25,94.63.246.227/25,91.204.48.147/25,91.204.48.128/25,92.63.99.108/25,92.63.99.108/25,91.213.29.42/25,203.148.13.20/25,194.247.58.51/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000247; rev:2307;) drop ip [91.204.48.32/25,94.63.246.227/25,91.213.29.45/25,91.213.29.45/25,46.29.254.221/25,91.212.135.158/25,46.29.254.217/25,92.241.164.67/25,92.241.164.67/25,92.241.164.67/25,92.241.164.67/25,92.241.164.67/25,92.241.164.67/25,97.66.82.179/25,91.200.240.7/25,91.200.240.7/25,91.200.240.7/25,91.200.240.7/25,91.200.240.7/25,213.246.42.243/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000248; rev:2307;) drop ip [213.246.42.243/25,91.200.240.7/25,91.200.240.7/25,91.200.240.7/25,92.241.164.67/25,66.96.205.136/25,71.224.154.160/25,71.235.85.177/25,200.13.244.245/25,200.13.244.245/25,140.116.60.29/25,94.63.244.30/25,76.76.115.106/25,194.60.205.202/25,194.60.205.202/25,193.186.9.76/25,91.206.200.131/25,91.206.200.131/25,46.29.254.218/25,91.213.217.241/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000249; rev:2307;) drop ip [91.206.200.132/25,91.206.200.132/25,195.80.151.194/25,91.213.217.241/25,46.29.254.225/25,195.80.151.194/25,91.206.200.133/25,91.206.200.133/25,91.206.200.133/25,46.166.128.28/25,46.166.128.28/25,46.166.128.28/25,46.166.128.28/25,46.166.128.28/25,188.240.32.164/25,188.240.32.164/25,188.240.32.164/25,188.240.32.164/25,91.217.153.42/25,91.217.153.42/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000250; rev:2307;) drop ip [178.162.151.24/25,174.127.70.195/25,195.80.151.194/25,91.212.135.158/25,84.16.243.232/25,210.124.107.3/25,212.150.164.204/25,212.150.164.204/25,195.246.200.72/25,195.246.200.72/25,69.50.192.250/25,200.58.119.150/25,91.217.162.24/25,82.146.39.61/25,82.146.39.61/25,70.38.124.97/25,70.38.124.97/25,91.220.62.84/25,91.220.62.84/25,91.220.62.84/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000251; rev:2307;) drop ip [91.220.62.84/25,50.22.110.217/25,50.22.110.217/25,50.22.110.217/25,193.16.213.14/25,193.16.213.14/25,70.46.79.251/25,70.46.79.251/25,70.43.40.116/25,70.43.40.116/25,70.43.40.116/25,70.46.79.251/25,46.29.252.96/25,188.120.226.127/25,95.64.8.76/25,195.145.129.31/25,213.110.240.10/25,216.120.254.101/25,216.120.254.101/25,216.120.254.101/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000252; rev:2307;) drop ip [193.16.213.72/25,193.16.213.138/25,193.16.213.138/25,213.110.240.10/25,86.55.140.203/25,193.16.213.135/25,193.16.213.135/25,193.16.213.73/25,193.16.213.73/25,204.16.197.216/25,91.193.192.90/25,95.64.10.201/25,193.105.240.45/25,193.105.240.45/25,193.16.213.138/25,95.65.10.83/25,95.65.10.83/25,193.106.173.151/25,174.36.82.199/25,174.36.82.199/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000253; rev:2307;) drop ip [203.234.178.1/25,213.246.42.241/25,213.246.42.241/25,46.4.154.109/25,178.239.57.123/25,178.239.57.123/25,69.50.200.239/25,91.216.122.159/25,46.161.20.155/25,92.241.165.160/25,91.213.217.36/25,91.213.217.36/25,209.59.205.143/25,209.59.205.143/25,193.106.175.110/25,193.106.175.110/25,193.106.175.110/25,91.211.117.168/25,91.211.117.168/25,216.147.35.69/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000254; rev:2307;) drop ip [46.161.20.140/25,174.36.165.20/25,174.36.165.27/25,82.146.48.187/25,82.146.48.187/25,193.105.134.190/25,95.64.9.41/25,208.91.129.151/25,208.91.129.151/25,221.143.20.250/25,89.114.9.121/25,46.161.11.116/25,193.105.134.190/25,193.105.134.190/25,178.18.243.229/25,217.23.11.249/25,208.91.129.144/25,217.23.11.249/25,72.22.88.130/25,72.22.88.131/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000255; rev:2307;) drop ip [72.22.88.130/25,72.22.88.131/25,72.22.88.132/25,193.106.175.183/25,193.106.175.183/25,193.106.175.183/25,64.31.55.140/25,64.31.55.140/25,64.31.55.140/25,91.193.192.90/25,193.107.19.72/25,178.18.243.229/25,120.125.86.7/25,66.150.214.204/25,66.150.214.204/25,212.150.164.204/25,212.150.164.204/25,193.106.173.155/25,193.106.173.155/25,193.106.173.155/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000256; rev:2307;) drop ip [76.73.80.98/25,122.224.18.36/25,122.224.18.36/25,122.224.18.36/25,209.212.154.218/25,188.229.88.137/25,76.73.2.21/25,76.73.2.21/25,209.200.9.228/25,209.200.9.228/25,208.115.241.246/25,208.115.241.246/25,199.30.139.110/25,199.30.139.110/25,199.30.139.110/25,199.30.139.111/25,86.158.27.183/25,86.158.27.183/25,86.55.210.234/25,188.190.96.53/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000257; rev:2307;) drop ip [188.229.89.78/25,188.229.89.131/25,188.229.89.182/25,188.120.243.139/25,188.120.243.140/25,184.82.233.195/25,184.82.233.195/25,67.23.243.240/25,86.55.210.236/25,64.120.171.96/25,64.120.171.96/25,66.7.218.216/25,66.7.218.216/25,66.7.218.216/25,66.7.218.216/25,66.7.218.216/25,66.7.218.216/25,62.150.99.149/25,69.90.47.44/25,69.90.47.44/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000258; rev:2307;) drop ip [195.69.202.59/25,46.29.249.195/25,188.187.188.48/25,188.187.188.48/25,94.23.96.3/25,94.23.96.3/25,94.23.96.3/25,46.161.10.145/25,84.51.21.108/25,31.184.237.71/25,31.184.237.92/25,216.59.18.92/25,212.150.164.206/25,210.175.9.45/25,210.175.9.45/25,210.175.9.45/25,193.105.240.15/25,193.105.240.15/25,193.105.240.15/25,199.16.130.11/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000259; rev:2307;) drop ip [199.16.130.11/25,129.121.201.91/25,129.121.201.91/25,188.95.253.13/25,85.17.159.77/25,85.17.159.77/25,85.17.159.77/25,85.17.159.77/25,188.240.47.189/25,188.240.47.189/25,190.14.36.42/25,190.14.36.42/25,77.79.11.251/25,77.79.11.251/25,88.255.89.207/25,210.211.108.213/25,210.211.108.213/25,188.229.89.207/25,46.161.29.9/25,66.45.243.38/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000260; rev:2307;) drop ip [65.75.145.141/25,208.98.42.122/25,208.98.42.122/25,208.98.42.122/25,91.213.29.15/25,173.212.255.31/25,109.230.246.198/25,109.230.246.198/25,109.230.246.200/25,109.230.246.200/25,212.7.201.48/25,212.7.201.48/25,212.7.201.48/25,186.190.213.10/25,186.190.213.10/25,69.64.49.35/25,117.103.37.36/25,117.103.37.36/25,69.64.63.224/25,109.230.246.199/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000261; rev:2307;) drop ip [46.166.130.131/25,195.14.112.237/25,66.219.27.132/25,79.142.65.179/25,79.142.65.179/25,79.142.65.179/25,109.73.106.6/25,109.73.106.6/25,210.211.108.213/25,210.211.108.213/25,188.190.97.25/25,210.211.108.213/25,210.211.108.213/25,210.211.108.213/25,210.211.108.213/25,77.221.149.219/25,31.214.145.191/25,210.211.108.213/25,210.211.108.213/25,210.211.108.213/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000262; rev:2307;) drop ip [173.45.108.116/25,188.95.253.13/25,95.57.120.136/25,82.114.94.182/25,212.124.110.134/25,89.46.251.130/25,74.63.232.212/25,188.95.253.13/25,64.31.42.114/25,65.75.139.162/25,46.16.240.18/25,74.63.237.13/25,204.93.197.106/25,204.93.197.106/25,204.93.197.106/25,74.63.223.174/25,67.209.224.57/25,46.16.240.18/25,82.146.41.96/25,82.146.41.96/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000263; rev:2307;) drop ip [92.38.209.37/25,46.102.245.212/25,46.102.245.212/25,77.79.9.65/25,77.79.9.65/25,77.79.9.65/25,194.11.16.156/25,67.23.240.24/25,78.24.217.227/25,78.24.217.227/25,78.24.217.227/25,77.109.111.66/25,202.65.207.137/25,188.72.202.198/25,188.72.202.198/25,188.72.202.198/25,46.29.255.124/25,88.198.61.233/25,88.198.61.233/25,88.198.61.233/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000264; rev:2307;) drop ip [195.88.191.46/25,195.88.191.46/25,195.88.191.46/25,195.88.191.47/25,195.88.191.47/25,195.88.191.47/25,202.65.207.137/25,77.79.7.47/25,77.79.7.47/25,77.79.7.47/25,200.63.46.90/25,200.63.46.90/25,210.211.108.215/25,210.211.108.215/25,210.211.108.215/25,210.211.108.215/25,210.211.108.215/25,210.211.108.215/25,94.60.123.138/25,94.60.123.147/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000265; rev:2307;) drop ip [94.63.150.61/25,46.29.255.123/25,195.226.220.142/25,195.226.220.142/25,195.226.220.142/25,195.226.220.142/25,195.226.220.142/25,195.226.220.142/25,195.226.220.142/25,195.226.220.142/25,85.10.251.233/25,85.10.251.233/25,85.10.251.233/25,91.228.160.52/25,91.228.160.52/25,91.228.160.52/25,91.228.160.52/25,91.228.160.52/25,91.228.160.52/25,91.228.160.52/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000266; rev:2307;) drop ip [95.64.43.88/25,46.165.192.148/25,8.17.60.252/25,88.181.114.175/25,88.181.114.175/25,88.181.114.175/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,85.214.70.156/25,173.208.131.234/25,173.208.131.234/25,67.222.130.115/25,46.108.225.121/25,200.63.47.53/25,200.63.47.53/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000267; rev:2307;) drop ip [91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,108.59.1.13/25,46.29.255.202/25,178.18.243.229/25,176.28.0.129/25,176.28.0.129/25,200.63.44.172/25,200.63.44.172/25,200.63.44.172/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,109.127.8.246/25,188.241.114.86/25,188.241.114.86/25,91.228.133.72/25,91.228.133.72/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000268; rev:2307;) drop ip [178.18.243.137/25,180.75.58.72/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,184.22.123.48/25,46.165.192.166/25,188.229.89.121/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,91.228.133.72/25,46.108.225.120/25,91.228.230.54/25,188.229.89.125/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000269; rev:2307;) drop ip [217.23.12.197/25,217.23.12.197/25,188.229.89.240/25,62.109.11.17/25,62.109.11.17/25,91.220.0.54/25,91.220.0.54/25,91.220.0.54/25,195.189.226.107/25,195.189.226.107/25,195.189.226.107/25,188.72.206.219/25,178.18.243.242/25,94.63.149.220/25,77.79.13.148/25,77.79.13.148/25,77.79.13.148/25,77.79.13.148/25,115.21.65.10/25,216.24.205.250/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000270; rev:2307;) drop ip [200.98.202.76/25,74.53.229.146/25,46.166.128.103/25,46.166.128.103/25,46.166.128.103/25,78.189.218.14/25,78.189.218.14/25,78.189.218.14/25,79.142.70.252/25,79.142.70.252/25,79.142.70.252/25,31.184.237.233/25,188.229.89.120/25,178.162.137.105/25,94.63.149.220/25,46.108.225.50/25,46.108.225.50/25,46.108.225.50/25,193.107.16.115/25,94.63.149.223/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000271; rev:2307;) drop ip [178.79.132.23/25,195.242.161.214/25,95.173.177.34/25,70.86.154.56/25,174.133.203.116/25,193.107.16.115/25,178.18.249.23/25,178.18.249.23/25,91.207.192.51/25,69.162.106.150/25,122.224.4.134/25,174.120.58.58/25,174.120.58.58/25,174.120.58.58/25,184.107.209.115/25,184.107.209.115/25,77.79.7.205/25,77.79.7.205/25,77.79.7.205/25,211.154.153.49/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000272; rev:2307;) drop ip [122.224.4.134/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000273; rev:2307;) drop ip [95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000274; rev:2307;) drop ip [95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25,95.163.66.208/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000275; rev:2307;) drop ip [95.163.66.208/25,95.163.66.208/25,195.242.161.89/25,95.163.66.208/25,92.114.200.165/25,92.114.200.165/25,188.190.98.139/25,188.190.98.139/25,188.190.98.139/25,217.41.91.26/25,217.41.91.26/25,217.41.91.26/25,95.168.172.225/25,85.17.159.77/25,85.17.159.77/25,85.17.159.77/25,85.17.159.77/25,80.78.243.44/25,46.166.149.186/25,46.166.149.186/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000276; rev:2307;) drop ip [91.228.160.170/25,91.228.160.170/25,91.228.160.170/25,173.44.34.184/25,204.45.79.76/25,204.45.79.76/25,109.236.85.48/25,91.228.133.75/25,89.208.34.80/25,91.229.90.3/25,91.229.90.3/25,91.229.90.3/25,91.229.90.3/25,89.208.34.80/25,91.221.98.31/25,216.215.112.149/25,216.215.112.149/25,216.215.112.149/25,78.189.235.94/25,78.189.235.94/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000277; rev:2307;) drop ip [85.17.92.135/25,178.63.38.187/25,67.230.173.202/25,193.169.218.210/25,46.19.32.30/25,213.155.4.16/25,82.146.60.237/25,24.210.174.215/25,93.174.91.13/25,93.174.91.13/25,93.174.91.13/25,94.228.217.220/25,77.79.13.210/25,77.79.13.210/25,77.79.13.210/25,91.230.111.6/25,93.183.203.28/25,188.40.52.46/25,94.63.240.235/25,99.1.163.51/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000278; rev:2307;) drop ip [46.28.107.21/25,46.28.107.21/25,46.28.107.21/25,188.219.154.228/25,188.219.154.228/25,188.219.154.228/25,91.228.132.54/25,91.228.132.54/25,141.105.66.240/25,141.105.66.240/25,141.105.66.240/25,91.194.214.66/25,195.23.154.196/25,188.247.232.176/25,89.248.166.131/25,89.248.166.131/25,89.248.166.131/25,178.18.249.66/25,68.232.185.99/25,95.57.120.214/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000279; rev:2307;) drop ip [77.79.9.21/25,77.79.9.21/25,77.79.9.21/25,77.79.9.21/25,77.79.9.21/25,77.79.9.21/25,46.16.240.19/25,46.16.240.19/25,46.16.240.19/25,178.170.147.6/25,178.170.147.6/25,31.3.230.125/25,195.128.121.50/25,195.128.121.50/25,195.128.121.50/25,87.251.154.13/25,188.190.98.111/25,188.190.98.111/25,78.159.121.47/25,187.18.147.205/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000280; rev:2307;) drop ip [188.190.98.112/25,188.190.98.111/25,188.190.98.112/25,77.79.9.16/25,77.79.9.16/25,77.79.9.16/25,87.251.154.171/25,87.251.154.171/25,106.187.45.170/25,106.187.45.170/25,106.187.45.170/25,88.198.149.131/25,88.198.149.131/25,88.198.149.131/25,65.75.144.38/25,65.75.144.38/25,66.228.45.243/25,212.176.20.2/25,146.0.73.88/25,91.230.111.6/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000281; rev:2307;) drop ip [87.251.154.158/25,87.251.154.158/25,46.45.164.164/25,91.217.82.156/25,91.217.82.156/25,91.217.82.156/25,146.185.242.36/25,79.137.226.77/25,79.137.226.77/25,79.137.226.77/25,188.247.232.23/25,188.247.232.23/25,140.113.207.143/25,140.113.207.143/25,188.247.232.182/25,188.247.232.182/25,85.121.39.27/25,85.121.39.27/25,85.121.39.27/25,76.97.34.25/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000282; rev:2307;) drop ip [218.94.61.109/25,216.119.75.210/25,85.17.200.229/25,85.17.200.229/25,85.17.200.229/25,85.17.200.229/25,85.17.200.229/25,85.17.200.229/25,85.17.200.229/25,204.12.231.78/25,204.12.231.78/25,204.12.231.78/25,204.12.231.78/25,204.12.231.78/25,204.12.231.78/25,204.12.231.78/25,95.168.187.207/25,217.23.11.181/25,217.23.11.181/25,217.23.11.181/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000283; rev:2307;) drop ip [184.22.211.130/25,184.22.211.130/25,65.75.144.38/25,65.75.144.38/25,178.162.174.121/25,78.111.51.119/25,78.111.51.119/25,70.32.85.212/25,78.111.51.119/25,88.198.151.9/25,188.165.215.31/25,188.95.159.125/25,188.95.159.125/25,188.95.159.125/25,81.136.209.175/25,80.67.17.161/25,118.88.25.36/25,118.88.25.36/25,95.57.120.135/25,95.57.120.135/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000284; rev:2307;) drop ip [77.79.9.23/25,77.79.9.23/25,203.170.193.101/25,91.227.115.8/25,91.227.115.8/25,89.149.223.158/25,188.72.242.115/25,66.252.128.0/20,205.159.1.167/25,208.49.164.0/24,208.50.66.224/27,66.252.128.0/20,82.186.27.16/29,82.187.159.32/29,82.187.159.168/29,195.245.244.243/25,195.245.244.244/25,200.154.100.232/25,205.159.1.167/25,208.49.164.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000285; rev:2307;) drop ip [216.20.162.14/25,82.175.83.120/29,12.201.135.240/28,63.254.110.5/25,66.252.128.0/20,82.186.27.16/29,82.187.159.32/29,82.187.159.168/29,195.245.244.243/25,195.245.244.244/25,200.154.100.232/25,205.159.1.167/25,208.49.164.0/24,208.50.66.224/27,216.20.162.0/24,82.175.83.120/29,63.199.57.96/27,63.199.57.128/25,64.166.187.128/26,64.166.187.192/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000286; rev:2307;) drop ip [67.125.49.192/29,81.4.78.0/24,194.183.226.144/29,194.183.226.192/27,198.70.114.0/24,208.49.164.0/22,208.49.168.0/21,208.49.176.0/20,208.49.192.0/18,208.50.0.0/18,208.50.64.0/23,208.50.66.0/24,208.191.136.16/28,216.20.160.0/20,66.252.128.0/20,82.186.27.16/29,82.187.159.32/29,82.187.159.168/29,195.245.244.243/25,195.245.244.244/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000287; rev:2307;) drop ip [205.159.1.167/25,208.49.164.0/24,208.50.66.224/27,216.20.162.14/25,82.175.83.120/29,12.201.135.240/28,63.254.110.5/25,66.252.128.0/20,82.186.27.16/29,82.187.159.32/29,82.187.159.168/29,195.245.244.243/25,195.245.244.244/25,200.154.100.232/25,205.159.1.167/25,208.49.164.0/24,208.50.66.224/27,216.20.162.0/24,82.175.83.120/29,63.199.57.96/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000288; rev:2307;) drop ip [64.166.187.128/26,64.166.187.192/25,66.252.128.0/20,67.125.49.192/29,81.4.78.0/24,194.183.226.144/29,194.183.226.192/27,198.70.114.0/24,208.49.164.0/22,208.49.168.0/21,208.49.176.0/20,208.49.192.0/18,208.50.0.0/18,208.50.64.0/23,208.50.66.0/24,208.191.136.16/28,216.20.160.0/20,66.227.17.160/29,67.43.230.11/25,67.62.118.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000289; rev:2307;) drop ip [89.149.214.12/30,89.149.214.16/30,89.149.214.20/25,193.2.116.18/25,208.65.144.1/25,208.65.144.2/25,217.57.222.152/29,66.227.17.160/29,67.43.230.11/25,67.62.118.0/24,67.62.118.39/25,89.149.214.11/25,89.149.214.12/30,89.149.214.16/30,89.149.214.20/25,193.2.116.18/25,194.123.220.208/29,208.65.144.1/25,208.65.144.2/25,212.136.227.240/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000290; rev:2307;) drop ip [212.210.113.16/28,217.57.194.216/29,217.57.222.152/29,194.120.33.56/29,208.252.246.120/29,80.127.186.96/28,81.68.16.0/26,92.65.212.136/29,92.66.188.192/29,212.129.247.0/27,212.178.125.184/29,212.178.126.128/27,213.126.184.96/27,213.126.184.192/27,217.100.192.0/20,217.100.245.64/26,66.227.17.160/29,67.43.230.11/25,67.62.118.0/24,77.242.123.224/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000291; rev:2307;) drop ip [89.149.214.12/30,89.149.214.16/30,89.149.214.20/25,193.2.116.18/25,194.123.220.208/29,212.136.227.240/29,212.142.38.24/29,212.210.113.16/28,217.57.194.216/29,217.57.222.152/29,194.120.33.56/29,208.252.246.120/29,211.157.127.20/30,80.127.186.96/28,81.68.16.0/26,92.65.212.136/29,92.66.188.192/29,212.129.247.0/27,212.178.125.184/29,212.178.126.128/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000292; rev:2307;) drop ip [213.126.184.192/27,217.100.192.0/20,217.100.245.64/26,12.150.191.0/24,12.168.159.112/29,66.113.128.0/17,76.74.24.0/24,146.82.174.0/24,212.241.48.0/25,66.227.17.160/29,67.43.230.11/25,67.62.118.0/24,67.62.118.39/25,89.149.214.11/25,89.149.214.12/30,89.149.214.16/30,89.149.214.20/25,193.2.116.18/25,194.123.220.208/29,208.65.144.1/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000293; rev:2307;) drop ip [212.136.227.240/29,212.142.38.24/29,212.210.113.16/28,217.57.194.216/29,217.57.222.152/29,194.120.33.56/29,208.252.246.120/29,80.127.186.96/28,81.68.16.0/26,92.65.212.136/29,92.66.188.192/29,212.129.247.0/27,212.178.125.184/29,212.178.126.128/27,213.126.184.96/27,213.126.184.192/27,217.100.192.0/20,217.100.245.64/26,66.227.17.160/29,67.43.230.11/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000294; rev:2307;) drop ip [77.242.123.224/29,77.242.126.240/29,89.149.214.11/25,89.149.214.12/30,89.149.214.16/30,89.149.214.20/25,193.2.116.18/25,194.120.33.56/29,208.252.246.120/29,211.157.127.20/30,80.127.186.96/28,81.68.16.0/26,92.65.212.136/29,92.66.188.192/29,212.129.247.0/27,212.178.125.184/29,212.178.126.128/27,213.126.184.96/27,213.126.184.192/27,217.100.192.0/20] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000295; rev:2307;) drop ip [12.150.191.0/24,12.168.159.112/29,66.113.128.0/17,76.74.24.0/24,146.82.174.0/24,212.241.48.0/25,38.99.252.0/22,38.102.232.0/21,63.216.209.0/24,63.249.17.0/24,63.249.18.0/24,64.15.153.64/29,64.77.127.42/25,64.93.88.0/22,64.226.28.33/25,65.120.42.0/24,66.102.11.103/25,66.117.5.0/24,66.135.48.65/25,66.135.48.66/31] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000296; rev:2307;) drop ip [66.135.48.72/29,66.135.48.80/25,66.172.60.0/23,66.180.205.0/24,67.159.32.24/29,67.159.32.32/31,67.205.102.47/25,67.205.102.48/31,67.205.102.50/25,67.205.102.54/31,67.205.102.56/29,67.205.102.64/28,68.178.232.100/25,68.183.138.24/25,69.0.145.33/25,69.44.157.145/25,69.44.157.146/31,69.108.138.64/25,69.235.82.188/25,69.235.200.80/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000297; rev:2307;) drop ip [69.239.49.80/25,70.38.61.0/27,70.38.102.97/25,70.38.102.98/31,70.38.102.100/31,70.38.102.102/25,71.103.150.15/25,71.106.105.118/25,71.106.220.246/25,71.119.248.30/25,71.119.249.2/25,71.134.9.119/25,72.45.198.191/25,72.51.39.157/25,72.51.42.229/25,72.55.146.180/30,72.55.146.184/29,72.55.146.192/30,72.55.146.196/31,72.55.146.198/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000298; rev:2307;) drop ip [72.172.92.0/24,75.5.10.39/25,75.22.58.115/25,75.80.16.33/25,75.80.50.199/25,76.80.0.11/25,76.80.53.134/25,76.80.114.15/25,76.81.61.216/25,76.168.53.125/25,76.169.244.186/25,76.171.153.131/25,76.172.75.212/25,82.94.237.217/25,82.94.237.218/31,82.94.237.220/31,82.94.237.222/25,84.194.251.194/25,198.78.186.0/23,198.78.188.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000299; rev:2307;) drop ip [206.251.184.50/25,207.171.0.0/18,207.171.3.72/29,207.171.3.80/28,207.171.3.96/27,207.171.3.128/25,207.171.9.0/24,207.171.30.0/27,207.171.62.0/24,208.64.67.0/24,208.78.94.75/25,209.35.163.225/25,209.133.104.0/23,209.151.247.0/24,209.221.166.0/24,216.224.115.64/26,216.224.115.128/25,12.144.217.136/29,12.200.218.0/24,38.99.252.0/22] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000300; rev:2307;) drop ip [63.166.177.128/25,63.166.180.0/24,63.216.209.0/24,63.249.17.0/24,63.249.18.0/24,64.15.153.64/29,64.77.127.42/25,64.93.88.0/22,64.213.84.0/22,64.226.28.33/25,65.120.42.0/24,65.162.94.0/28,65.162.94.128/28,65.162.94.192/28,65.182.105.161/25,65.182.105.162/31,65.182.105.164/30,65.182.105.168/29,65.182.105.176/29,65.182.105.184/31] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000301; rev:2307;) drop ip [66.102.11.103/25,66.117.5.0/24,66.135.48.65/25,66.135.48.66/31,66.135.48.68/30,66.135.48.72/29,66.135.48.80/25,66.172.60.0/23,66.180.205.0/24,67.159.32.24/29,67.159.32.32/31,67.205.102.47/25,67.205.102.48/31,67.205.102.50/25,67.205.102.54/31,67.205.102.56/29,67.205.102.64/28,68.178.232.100/25,68.183.138.24/25,69.0.145.33/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000302; rev:2307;) drop ip [69.44.157.146/31,69.108.138.64/25,69.235.82.188/25,69.235.200.80/25,69.235.217.62/25,69.239.49.80/25,70.38.61.0/27,70.38.102.97/25,70.38.102.98/31,70.38.102.100/31,70.38.102.102/25,71.103.150.15/25,71.106.105.118/25,71.106.220.246/25,71.119.248.30/25,71.119.249.2/25,71.134.9.119/25,72.45.198.191/25,72.51.39.157/25,72.51.42.229/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000303; rev:2307;) drop ip [72.55.146.184/29,72.55.146.192/30,72.55.146.196/31,72.55.146.198/25,72.172.64.0/19,72.172.88.0/22,72.172.92.0/24,75.5.10.39/25,75.22.58.115/25,75.80.16.33/25,75.80.50.199/25,76.80.0.11/25,76.80.53.134/25,76.80.114.15/25,76.81.61.216/25,76.168.53.125/25,76.169.244.186/25,76.171.153.131/25,76.172.75.212/25,82.94.237.217/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000304; rev:2307;) drop ip [82.94.237.220/31,82.94.237.222/25,84.194.251.194/25,174.136.192.0/18,198.78.186.0/23,198.78.188.0/24,203.175.172.0/24,204.96.211.0/27,206.251.184.50/25,207.171.0.0/18,207.171.3.72/29,207.171.3.80/28,207.171.3.96/27,207.171.3.128/25,207.171.9.0/24,207.171.30.0/27,207.171.62.0/24,208.64.67.0/24,208.78.94.75/25,208.88.180.72/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000305; rev:2307;) drop ip [209.133.104.0/23,209.151.247.0/24,209.221.166.0/24,216.224.115.64/26,216.224.115.128/25,208.78.93.0/24,208.78.94.0/25,207.150.179.73/25,208.88.180.72/25,24.10.244.0/22,38.99.168.23/25,38.99.168.24/29,38.99.168.32/28,38.99.168.48/30,38.99.168.63/25,38.99.168.64/27,38.99.168.96/30,38.99.169.82/31,38.99.169.84/30,38.99.169.88/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000306; rev:2307;) drop ip [38.99.169.128/25,38.99.252.0/22,38.102.232.0/21,61.47.35.32/27,61.160.210.0/23,61.160.212.0/23,61.160.214.0/24,63.166.177.128/25,63.166.180.0/24,63.249.17.0/24,63.249.18.0/24,64.15.147.244/30,64.15.152.8/31,64.15.153.64/29,64.34.160.0/19,64.34.192.0/21,64.34.200.0/22,64.34.208.0/21,64.77.127.42/25,64.93.64.0/19] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000307; rev:2307;) drop ip [64.226.28.33/25,64.247.32.0/24,65.60.48.112/28,65.120.42.0/24,65.162.94.0/28,65.162.94.128/28,65.162.94.192/28,66.102.11.103/25,66.109.23.192/26,66.117.5.0/24,66.135.32.0/22,66.135.36.0/23,66.135.38.0/24,66.135.39.7/25,66.135.39.243/25,66.135.39.244/30,66.135.39.248/29,66.135.48.65/25,66.135.48.66/31,66.135.48.68/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000308; rev:2307;) drop ip [66.135.48.80/25,66.135.56.40/31,66.135.56.42/25,66.135.59.143/25,66.172.0.0/18,66.180.205.0/24,66.212.18.0/24,66.232.109.20/25,66.232.109.225/25,66.232.109.226/31,66.232.109.228/31,66.232.109.230/25,66.232.112.80/25,66.232.113.62/25,66.232.118.108/25,67.159.32.24/29,67.159.32.32/31,67.202.73.120/30,67.205.67.96/29,67.205.74.151/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000309; rev:2307;) drop ip [67.205.81.217/25,67.205.81.218/25,67.205.93.55/25,67.205.93.56/29,67.205.93.64/31,67.205.102.47/25,67.205.102.48/31,67.205.102.50/25,67.205.102.54/31,67.205.102.56/29,67.205.102.64/28,67.205.103.129/25,67.205.103.130/31,67.205.103.132/30,67.205.103.136/29,67.205.124.19/25,67.205.124.20/25,67.215.247.0/24,67.215.250.136/29,67.222.153.141/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000310; rev:2307;) drop ip [67.222.153.144/31,67.222.153.146/25,67.228.91.56/29,67.228.98.192/29,67.228.187.224/28,68.118.56.188/25,68.178.232.100/25,68.183.138.24/25,69.0.145.33/25,69.44.157.145/25,69.44.157.146/31,69.46.18.29/25,69.46.24.115/25,69.46.27.254/25,69.89.64.0/19,69.108.138.64/25,69.162.64.112/29,69.162.104.192/29,69.235.82.188/25,69.235.200.80/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000311; rev:2307;) drop ip [69.239.49.80/25,70.38.34.167/25,70.38.34.168/29,70.38.34.176/25,70.38.36.211/25,70.38.36.212/30,70.38.36.216/29,70.38.36.224/27,70.38.61.0/27,70.38.80.128/26,70.38.109.96/29,70.38.118.32/28,70.99.242.224/27,71.6.216.0/24,71.103.150.15/25,71.106.105.118/25,71.106.220.246/25,71.119.248.30/25,71.119.249.2/25,71.134.9.119/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000312; rev:2307;) drop ip [72.45.198.191/25,72.47.224.108/25,72.51.33.0/24,72.51.37.0/24,72.51.38.0/24,72.51.39.157/25,72.51.42.229/25,72.55.144.193/25,72.55.144.194/25,72.55.145.149/25,72.55.145.150/25,72.55.145.177/25,72.55.145.178/25,72.55.146.180/30,72.55.146.184/29,72.55.146.192/30,72.55.146.196/31,72.55.146.198/25,72.55.156.136/25,72.55.174.44/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000313; rev:2307;) drop ip [72.55.175.122/25,72.55.191.75/25,72.55.191.76/30,72.55.191.82/31,72.55.191.84/30,72.55.191.88/30,72.167.232.146/25,72.172.64.0/19,72.197.136.214/25,75.5.10.39/25,75.22.58.115/25,75.80.16.33/25,75.80.50.199/25,76.23.45.54/25,76.80.0.11/25,76.80.53.134/25,76.80.114.15/25,76.81.61.216/25,76.168.53.125/25,76.169.244.186/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000314; rev:2307;) drop ip [76.172.75.212/25,81.243.245.156/31,82.94.237.217/25,82.94.237.218/31,82.94.237.220/31,82.94.237.222/25,83.140.191.128/25,83.233.30.224/27,84.194.251.194/25,85.4.139.57/25,88.80.25.238/25,88.80.29.6/31,89.248.172.31/25,89.248.172.32/27,89.248.172.64/27,89.248.172.96/30,89.248.172.100/31,89.248.172.211/25,89.248.172.212/30,89.248.172.216/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000315; rev:2307;) drop ip [89.248.172.232/31,89.248.172.234/25,89.248.174.0/27,91.121.117.187/25,91.121.117.188/25,92.104.56.236/25,93.174.93.14/31,93.174.93.16/28,93.174.93.32/27,93.174.93.64/29,93.174.93.72/25,93.174.93.149/25,93.174.93.150/31,93.174.93.152/29,93.174.93.160/29,93.174.93.168/31,93.174.93.170/25,93.174.93.213/25,93.174.93.214/31,93.174.93.216/31] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000316; rev:2307;) drop ip [93.174.93.231/25,93.174.93.232/29,93.174.93.240/29,94.23.58.208/28,94.23.104.128/27,94.23.200.96/27,94.23.203.8/29,94.23.203.16/29,94.23.203.24/25,94.23.211.220/30,94.23.211.224/30,94.23.213.111/25,94.23.213.112/25,94.23.213.114/31,94.23.213.116/25,94.102.59.128/26,97.117.64.0/18,97.126.218.0/24,98.143.144.64/26,98.143.147.0/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000317; rev:2307;) drop ip [121.96.204.0/22,121.96.219.0/24,121.96.220.0/23,121.97.134.0/24,125.212.7.0/24,125.212.8.0/23,125.212.75.0/24,125.212.107.0/24,125.212.120.0/21,129.47.0.0/16,130.85.34.22/25,142.55.41.128/25,166.70.28.26/25,173.45.94.128/25,173.45.100.72/29,173.45.103.16/28,173.45.110.96/28,173.45.114.40/29,173.45.114.114/25,174.23.0.0/16] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000318; rev:2307;) drop ip [174.142.6.82/31,174.142.6.84/25,174.142.29.192/26,174.142.104.16/28,189.47.0.0/17,194.126.175.104/29,194.126.175.160/28,194.126.175.200/29,195.242.152.128/26,195.242.153.64/27,198.78.186.0/23,198.78.188.0/24,201.33.22.202/25,203.146.140.128/26,203.175.172.0/24,204.96.211.0/27,206.51.224.0/20,206.222.6.224/27,206.222.31.80/29,206.251.184.50/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000319; rev:2307;) drop ip [207.171.3.72/29,207.171.3.80/28,207.171.3.96/27,207.171.3.128/25,207.171.9.0/24,207.171.30.0/27,207.171.62.0/24,207.182.132.210/31,207.182.142.144/29,207.182.143.241/25,207.182.143.242/25,207.182.146.64/29,207.182.156.16/28,207.246.193.0/24,208.43.122.208/29,208.43.123.224/28,208.53.138.77/25,208.64.67.0/24,208.78.92.0/24,208.91.207.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000320; rev:2307;) drop ip [208.101.6.64/28,208.109.181.52/25,209.35.163.225/25,209.51.200.192/27,209.51.201.32/27,209.51.201.160/28,209.51.207.48/28,209.51.216.48/28,209.51.216.64/28,209.51.216.80/29,209.51.218.0/27,209.51.218.48/28,209.51.219.192/27,209.151.247.0/24,209.172.60.243/25,209.172.60.244/31,209.172.60.246/25,209.172.63.0/31,209.172.63.2/25,209.172.63.121/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000321; rev:2307;) drop ip [209.181.86.0/24,209.190.7.49/25,209.190.7.50/25,209.190.17.16/28,209.190.17.32/28,209.190.17.48/31,209.190.17.240/28,209.190.26.153/25,209.190.26.154/31,209.190.33.16/28,209.190.33.32/29,209.190.112.0/26,209.190.112.64/29,209.190.112.160/28,209.190.122.184/30,209.205.226.0/24,209.205.228.0/24,209.205.232.0/24,209.205.237.0/24,209.205.239.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000322; rev:2307;) drop ip [210.1.51.135/25,210.1.51.136/25,213.157.250.246/25,216.45.49.0/24,216.45.54.192/29,216.45.54.224/27,216.45.58.0/23,216.45.60.0/24,216.224.115.64/26,216.224.115.128/25,216.245.192.80/29,222.179.185.0/24,63.253.242.0/24,216.52.241.0/24,216.52.242.0/24,216.241.187.16/29,38.99.254.204/30,38.99.254.208/28,38.99.254.224/28,38.99.254.240/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000323; rev:2307;) drop ip [38.99.254.252/31,38.99.255.2/31,38.99.255.4/30,38.99.255.8/29,38.99.255.16/28,38.99.255.32/28,38.99.255.48/29,38.99.255.56/31,38.99.255.58/25,66.110.61.2/31,66.110.61.4/30,66.110.61.8/29,66.110.61.16/29,66.110.61.24/31,66.110.61.26/25,205.177.78.130/25,205.177.78.135/25,205.177.78.140/25,205.177.78.145/25,205.177.78.150/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000324; rev:2307;) drop ip [205.177.78.160/25,205.177.78.165/25,205.177.78.170/25,205.177.78.175/25,205.177.78.180/25,205.177.78.185/25,205.177.78.190/25,205.177.78.195/25,205.177.78.200/25,205.177.78.205/25,205.177.78.210/25,205.177.78.215/25,205.177.78.220/25,205.177.78.225/25,205.177.78.230/25,205.177.78.235/25,205.177.78.240/25,205.177.78.245/25,205.177.78.250/25,207.45.196.98/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000325; rev:2307;) drop ip [207.45.196.104/25,207.45.196.107/25,207.45.196.110/25,207.45.196.113/25,207.45.196.116/25,207.45.196.119/25,64.86.230.34/25,64.86.230.37/25,64.86.230.40/25,64.86.230.43/25,64.86.230.46/25,64.86.230.49/25,64.86.230.52/25,64.86.230.55/25,64.86.230.58/25,66.198.35.98/25,66.198.35.101/25,66.198.35.104/25,66.198.35.107/25,66.198.35.110/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000326; rev:2307;) drop ip [66.198.35.116/25,66.198.35.119/25,66.180.205.2/31,66.180.205.4/30,66.180.205.8/29,66.180.205.16/28,66.180.205.32/27,66.180.205.64/27,66.180.205.96/25,38.99.252.2/31,38.99.252.4/30,38.99.252.8/29,38.99.252.16/28,38.99.252.32/27,38.99.252.64/26,38.99.252.128/27,38.99.252.160/28,38.99.252.176/30,38.99.252.230/31,38.99.252.232/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000327; rev:2307;) drop ip [38.99.252.248/30,38.99.252.252/31,38.99.253.2/31,38.99.253.4/30,38.99.253.8/29,38.99.253.16/31,38.99.253.18/31,38.99.253.20/30,38.99.253.24/29,38.99.253.32/27,38.99.253.64/26,38.99.253.128/27,38.99.253.160/28,38.99.253.176/31,38.99.255.240/31,38.99.253.178/31,38.99.253.180/30,38.99.253.184/29,38.99.253.192/27,38.99.253.224/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000328; rev:2307;) drop ip [38.99.253.248/30,38.99.253.252/31,38.99.254.2/31,38.99.254.4/30,38.99.254.8/29,38.99.254.16/28,38.99.254.32/27,38.99.254.64/26,38.99.254.128/26,38.99.254.192/29,38.99.254.200/30,129.47.9.193/25,129.47.9.194/31,129.47.9.196/30,129.47.9.200/29,129.47.9.208/28,129.47.9.224/28,129.47.9.240/31,64.93.88.2/31,64.93.88.4/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000329; rev:2307;) drop ip [64.93.88.16/28,64.93.88.32/27,64.93.88.64/26,64.93.88.128/26,64.93.88.192/27,64.93.88.224/28,64.93.88.240/29,64.93.88.248/25,64.93.89.2/31,64.93.89.4/30,64.93.89.8/29,64.93.89.16/28,64.93.89.32/28,64.93.90.200/29,64.93.90.208/29,64.93.90.216/30,64.93.90.220/31,64.93.90.222/25,64.93.89.71/25,64.93.89.72/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000330; rev:2307;) drop ip [64.93.89.96/27,64.93.89.128/26,64.93.89.192/27,64.93.89.224/28,64.93.89.240/30,64.93.89.244/31,64.93.90.2/31,64.93.90.4/30,64.93.90.8/29,64.93.90.16/28,64.93.90.32/27,64.93.90.64/27,64.93.90.96/28,64.93.90.112/30,64.93.90.116/25,64.93.90.139/25,64.93.90.140/30,64.93.90.144/25,64.93.90.223/25,64.93.90.224/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000331; rev:2307;) drop ip [64.93.90.244/31,64.93.91.2/31,64.93.91.4/30,64.93.91.8/29,64.93.91.16/28,64.93.91.32/27,64.93.91.64/26,64.93.91.128/28,64.93.91.144/29,64.93.91.152/31,12.144.217.136/29,12.200.218.0/24,38.99.252.0/22,38.102.232.0/21,63.166.177.128/25,63.166.180.0/24,63.216.209.0/24,63.249.17.0/24,63.249.18.0/24,64.15.153.64/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000332; rev:2307;) drop ip [64.93.88.0/22,64.213.84.0/22,64.226.28.33/25,65.120.42.0/24,65.162.94.0/28,65.162.94.128/28,65.162.94.192/28,65.182.105.161/25,65.182.105.162/31,65.182.105.164/30,65.182.105.168/29,65.182.105.176/29,65.182.105.184/31,65.182.105.186/25,66.117.5.0/24,66.135.48.65/25,66.135.48.66/31,66.135.48.68/30,66.135.48.72/29,66.135.48.80/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000333; rev:2307;) drop ip [66.180.205.0/24,67.159.32.24/29,67.159.32.32/31,67.205.102.47/25,67.205.102.48/31,67.205.102.50/25,67.205.102.54/31,67.205.102.56/29,67.205.102.64/28,68.178.232.100/25,68.183.138.24/25,69.0.145.33/25,69.44.157.145/25,69.44.157.146/31,69.108.138.64/25,69.235.82.188/25,69.235.200.80/25,69.235.217.62/25,69.239.49.80/25,70.38.61.0/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000334; rev:2307;) drop ip [70.38.102.98/31,70.38.102.100/31,70.38.102.102/25,71.103.150.15/25,71.106.105.118/25,71.106.220.246/25,71.119.248.30/25,71.119.249.2/25,71.134.9.119/25,72.45.198.191/25,72.51.39.157/25,72.51.42.229/25,72.55.146.180/30,72.55.146.184/29,72.55.146.192/30,72.55.146.196/31,72.55.146.198/25,72.172.64.0/19,72.172.88.0/22,72.172.92.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000335; rev:2307;) drop ip [75.22.58.115/25,75.80.16.33/25,75.80.50.199/25,76.80.0.11/25,76.80.53.134/25,76.80.114.15/25,76.81.61.216/25,76.168.53.125/25,76.169.244.186/25,76.171.153.131/25,76.172.75.212/25,82.94.237.217/25,82.94.237.218/31,82.94.237.220/31,82.94.237.222/25,84.194.251.194/25,174.136.192.0/18,198.78.186.0/23,198.78.188.0/24,203.175.172.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000336; rev:2307;) drop ip [206.251.184.50/25,207.150.179.73/25,207.171.0.0/18,207.171.3.72/29,207.171.3.80/28,207.171.3.96/27,207.171.3.128/25,207.171.9.0/24,207.171.30.0/27,207.171.62.0/24,208.64.67.0/24,208.78.94.75/25,208.88.180.72/25,209.35.163.225/25,209.133.104.0/23,209.151.247.0/24,209.221.166.0/24,216.224.115.64/26,216.224.115.128/25,208.78.93.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000337; rev:2307;) drop ip [208.88.180.72/25,38.99.168.23/25,38.99.168.24/29,38.99.168.32/28,38.99.168.48/30,38.99.168.63/25,38.99.168.64/27,38.99.168.96/30,38.99.169.82/31,38.99.169.84/30,38.99.169.88/29,38.99.169.96/27,38.99.169.128/25,38.99.252.0/22,38.102.232.0/21,61.47.35.32/27,61.160.210.0/23,61.160.212.0/23,61.160.214.0/24,63.166.177.128/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000338; rev:2307;) drop ip [63.249.17.0/24,63.249.18.0/24,64.15.153.64/29,64.34.160.0/19,64.34.192.0/21,64.34.200.0/22,64.34.208.0/21,64.77.127.42/25,64.93.64.0/19,64.213.84.0/22,64.226.28.33/25,64.247.32.0/24,65.60.48.112/28,65.97.48.0/20,65.120.42.0/24,65.162.94.0/28,65.162.94.128/28,65.162.94.192/28,66.102.11.103/25,66.109.23.192/26] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000339; rev:2307;) drop ip [66.135.32.0/22,66.135.36.0/23,66.135.38.0/24,66.135.39.7/25,66.135.39.243/25,66.135.39.244/30,66.135.39.248/29,66.135.48.65/25,66.135.48.66/31,66.135.48.68/30,66.135.48.72/29,66.135.48.80/25,66.135.56.40/31,66.135.56.42/25,66.135.59.143/25,66.172.0.0/18,66.180.205.0/24,66.189.217.142/25,66.212.18.0/24,66.232.109.20/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000340; rev:2307;) drop ip [66.232.109.226/31,66.232.109.228/31,66.232.109.230/25,66.232.112.80/25,66.232.113.62/25,66.232.118.108/25,67.159.32.24/29,67.159.32.32/31,67.202.73.120/30,67.215.247.0/24,67.215.250.136/29,67.222.136.225/25,67.222.136.226/31,67.222.136.228/30,67.222.136.232/29,67.222.136.240/25,67.222.153.141/25,67.222.153.142/31,67.222.153.144/31,67.222.153.146/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000341; rev:2307;) drop ip [67.228.98.192/29,67.228.187.224/28,67.231.249.160/29,68.118.56.188/25,68.178.232.100/25,68.183.138.24/25,69.0.145.33/25,69.44.157.145/25,69.44.157.146/31,69.46.18.29/25,69.46.24.115/25,69.46.27.254/25,69.89.64.0/19,69.108.138.64/25,69.162.64.112/29,69.162.104.192/29,69.235.82.188/25,69.235.200.80/25,69.235.217.62/25,69.239.49.80/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000342; rev:2307;) drop ip [70.99.242.224/27,71.6.216.0/24,71.103.150.15/25,71.106.105.118/25,71.106.220.246/25,71.119.248.30/25,71.119.249.2/25,71.134.9.119/25,72.45.198.191/25,72.47.224.108/25,72.51.33.0/24,72.51.37.0/24,72.51.38.0/24,72.51.39.157/25,72.51.42.229/25,72.167.232.146/25,72.172.64.0/19,72.197.136.214/25,75.5.10.39/25,75.20.0.0/20] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000343; rev:2307;) drop ip [75.80.16.33/25,75.80.50.199/25,76.80.0.11/25,76.80.53.134/25,76.80.114.15/25,76.81.61.216/25,76.168.53.125/25,76.169.244.186/25,76.171.153.131/25,76.172.75.212/25,81.243.245.156/31,82.94.237.217/25,82.94.237.218/31,82.94.237.220/31,82.94.237.222/25,83.140.191.128/25,83.233.30.0/27,83.233.30.32/25,83.233.30.34/31,83.233.30.36/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000344; rev:2307;) drop ip [83.233.30.48/28,83.233.30.64/26,83.233.30.128/25,83.233.165.0/24,84.194.251.194/25,85.4.139.57/25,85.25.73.86/25,85.25.184.34/25,85.25.184.37/25,85.25.184.50/25,87.255.55.229/25,87.255.55.230/25,88.80.25.238/25,88.80.29.6/31,89.248.172.31/25,89.248.172.32/27,89.248.172.64/27,89.248.172.96/30,89.248.172.100/31,89.248.172.211/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000345; rev:2307;) drop ip [89.248.172.216/29,89.248.172.224/29,89.248.172.232/31,89.248.172.234/25,89.248.174.0/27,91.121.117.187/25,91.121.117.188/25,91.204.208.225/25,92.104.56.236/25,92.105.47.247/25,92.105.146.41/25,93.174.93.14/31,93.174.93.16/28,93.174.93.32/27,93.174.93.64/29,93.174.93.72/25,93.174.93.149/25,93.174.93.150/31,93.174.93.152/29,93.174.93.160/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000346; rev:2307;) drop ip [93.174.93.170/25,93.174.93.213/25,93.174.93.214/31,93.174.93.216/31,93.174.93.218/25,93.174.93.231/25,93.174.93.232/29,93.174.93.240/29,94.23.58.208/28,94.23.104.128/27,94.23.200.96/27,94.23.203.8/29,94.23.203.16/29,94.23.203.24/25,94.23.211.220/30,94.23.211.224/30,94.23.213.111/25,94.23.213.112/25,94.23.213.114/31,94.23.213.116/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000347; rev:2307;) drop ip [96.31.93.129/25,96.31.93.130/31,96.31.93.132/31,96.31.93.134/25,96.44.130.96/29,98.143.144.64/26,98.143.147.0/29,98.143.148.8/25,98.143.155.58/25,99.90.208.0/21,121.96.204.0/22,121.96.219.0/24,121.96.220.0/23,121.97.134.0/24,125.212.7.0/24,125.212.8.0/23,125.212.75.0/24,125.212.107.0/24,125.212.120.0/21,129.47.0.0/16] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000348; rev:2307;) drop ip [142.55.41.128/25,166.70.28.26/25,174.23.0.0/16,174.136.192.0/18,189.47.0.0/17,193.104.186.62/31,193.104.186.64/31,194.126.175.104/29,194.126.175.160/28,194.126.175.200/29,195.242.152.128/26,195.242.153.64/27,198.78.186.0/23,198.78.188.0/24,201.33.22.202/25,203.146.140.128/26,203.175.172.0/24,204.96.211.0/27,204.152.198.56/29,204.152.199.224/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000349; rev:2307;) drop ip [204.152.215.128/28,206.51.224.0/20,206.251.184.50/25,207.99.67.96/27,207.171.3.72/29,207.171.3.80/28,207.171.3.96/27,207.171.3.128/25,207.171.9.0/24,207.171.30.0/27,207.171.62.0/24,207.246.193.0/24,208.43.87.16/30,208.43.122.208/29,208.43.123.224/28,208.53.138.77/25,208.64.67.0/24,208.78.92.0/24,208.91.207.0/24,208.100.6.64/26] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000350; rev:2307;) drop ip [208.109.181.52/25,209.35.163.225/25,209.151.247.0/24,209.190.7.49/25,209.190.7.50/25,209.190.17.16/28,209.190.17.32/28,209.190.17.48/31,209.190.17.240/28,209.190.26.153/25,209.190.26.154/31,209.190.33.16/28,209.190.33.32/29,209.190.33.174/25,209.190.112.0/26,209.190.112.64/29,209.190.112.160/28,209.190.122.184/30,209.205.226.0/24,209.205.228.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000351; rev:2307;) drop ip [209.205.237.0/24,209.205.239.0/24,209.221.166.0/24,210.1.51.135/25,210.1.51.136/25,213.157.250.246/25,216.45.49.0/24,216.45.54.192/29,216.45.54.224/27,216.45.58.0/23,216.45.60.0/24,216.224.115.64/26,216.224.115.128/25,216.245.192.80/29,216.250.112.0/20,222.179.185.0/24,63.253.242.0/24,216.52.241.0/24,216.52.242.0/24,216.241.187.16/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000352; rev:2307;) drop ip [38.99.254.208/28,38.99.254.224/28,38.99.254.240/29,38.99.254.248/30,38.99.254.252/31,38.99.255.2/31,38.99.255.4/30,38.99.255.8/29,38.99.255.16/28,38.99.255.32/28,38.99.255.48/29,38.99.255.56/31,38.99.255.58/25,66.110.61.2/31,66.110.61.4/30,66.110.61.8/29,66.110.61.16/29,66.110.61.24/31,66.110.61.26/25,205.177.78.130/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000353; rev:2307;) drop ip [205.177.78.140/25,205.177.78.145/25,205.177.78.150/25,205.177.78.155/25,205.177.78.160/25,205.177.78.165/25,205.177.78.170/25,205.177.78.175/25,205.177.78.180/25,205.177.78.185/25,205.177.78.190/25,205.177.78.195/25,205.177.78.200/25,205.177.78.205/25,205.177.78.210/25,205.177.78.215/25,205.177.78.220/25,205.177.78.225/25,205.177.78.230/25,205.177.78.235/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000354; rev:2307;) drop ip [205.177.78.245/25,205.177.78.250/25,207.45.196.98/25,207.45.196.101/25,207.45.196.104/25,207.45.196.107/25,207.45.196.110/25,207.45.196.113/25,207.45.196.116/25,207.45.196.119/25,64.86.230.34/25,64.86.230.37/25,64.86.230.40/25,64.86.230.43/25,64.86.230.46/25,64.86.230.49/25,64.86.230.52/25,64.86.230.55/25,64.86.230.58/25,66.198.35.98/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000355; rev:2307;) drop ip [66.198.35.104/25,66.198.35.107/25,66.198.35.110/25,66.198.35.113/25,66.198.35.116/25,66.198.35.119/25,66.180.205.2/31,66.180.205.4/30,66.180.205.8/29,66.180.205.16/28,66.180.205.32/27,66.180.205.64/27,66.180.205.96/25,38.99.252.2/31,38.99.252.4/30,38.99.252.8/29,38.99.252.16/28,38.99.252.32/27,38.99.252.64/26,38.99.252.128/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000356; rev:2307;) drop ip [38.99.252.176/30,38.99.252.230/31,38.99.252.232/29,38.99.252.240/29,38.99.252.248/30,38.99.252.252/31,38.99.253.2/31,38.99.253.4/30,38.99.253.8/29,38.99.253.16/31,38.99.253.18/31,38.99.253.20/30,38.99.253.24/29,38.99.253.32/27,38.99.253.64/26,38.99.253.128/27,38.99.253.160/28,38.99.253.176/31,38.99.255.240/31,38.99.253.178/31] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000357; rev:2307;) drop ip [38.99.253.184/29,38.99.253.192/27,38.99.253.224/28,38.99.253.240/29,38.99.253.248/30,38.99.253.252/31,38.99.254.2/31,38.99.254.4/30,38.99.254.8/29,38.99.254.16/28,38.99.254.32/27,38.99.254.64/26,38.99.254.128/26,38.99.254.192/29,38.99.254.200/30,129.47.9.193/25,129.47.9.194/31,129.47.9.196/30,129.47.9.200/29,129.47.9.208/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000358; rev:2307;) drop ip [129.47.9.240/31,64.93.88.2/31,64.93.88.4/30,64.93.88.8/29,64.93.88.16/28,64.93.88.32/27,64.93.88.64/26,64.93.88.128/26,64.93.88.192/27,64.93.88.224/28,64.93.88.240/29,64.93.88.248/25,64.93.89.2/31,64.93.89.4/30,64.93.89.8/29,64.93.89.16/28,64.93.89.32/28,64.93.90.200/29,64.93.90.208/29,64.93.90.216/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000359; rev:2307;) drop ip [64.93.90.222/25,64.93.89.71/25,64.93.89.72/29,64.93.89.80/28,64.93.89.96/27,64.93.89.128/26,64.93.89.192/27,64.93.89.224/28,64.93.89.240/30,64.93.89.244/31,64.93.90.2/31,64.93.90.4/30,64.93.90.8/29,64.93.90.16/28,64.93.90.32/27,64.93.90.64/27,64.93.90.96/28,64.93.90.112/30,64.93.90.116/25,64.93.90.139/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000360; rev:2307;) drop ip [64.93.90.144/25,64.93.90.223/25,64.93.90.224/28,64.93.90.240/30,64.93.90.244/31,64.93.91.2/31,64.93.91.4/30,64.93.91.8/29,64.93.91.16/28,64.93.91.32/27,64.93.91.64/26,64.93.91.128/28,64.93.91.144/29,64.93.91.152/31,38.99.213.232/29,38.99.223.144/30,38.100.15.0/24,38.100.19.192/26,38.100.20.0/28,38.100.24.0/22] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000361; rev:2307;) drop ip [38.100.134.0/23,61.135.144.0/24,61.199.239.120/29,62.233.130.0/29,62.233.137.0/24,63.144.28.160/28,63.147.23.224/27,63.165.74.64/28,63.175.161.56/29,63.206.250.216/29,63.226.99.88/29,64.52.125.64/27,64.167.213.184/29,64.217.133.80/29,65.113.38.0/27,65.116.50.224/27,65.163.76.0/22,65.219.252.128/25,66.47.167.32/29,66.246.249.0/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000362; rev:2307;) drop ip [67.15.221.40/31,67.15.221.150/31,67.15.221.152/29,67.15.221.160/30,67.15.222.0/23,67.15.222.2/31,67.15.222.4/30,67.15.222.8/29,67.15.222.16/28,67.15.222.32/29,67.15.222.40/31,67.15.222.101/25,67.15.222.102/31,67.15.222.104/29,67.15.222.112/28,67.15.222.128/29,67.15.222.136/30,67.15.222.140/25,67.15.223.2/31,67.15.223.4/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000363; rev:2307;) drop ip [67.15.223.16/28,67.15.223.32/29,67.15.223.40/31,67.15.223.101/25,67.15.223.102/31,67.15.223.104/29,67.15.223.112/28,67.15.223.128/29,67.15.223.136/30,67.15.223.140/25,67.15.224.2/31,67.15.224.4/30,67.15.224.8/29,67.15.224.16/28,67.15.224.111/25,67.15.224.112/28,67.15.224.128/29,67.15.224.136/30,67.15.224.140/25,67.40.71.16/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000364; rev:2307;) drop ip [67.111.171.48/30,67.111.181.244/30,67.133.231.192/29,67.158.124.128/29,67.210.162.160/28,68.255.85.152/29,69.233.179.240/29,70.85.245.232/29,70.85.245.240/29,71.4.164.0/24,74.86.146.244/30,74.86.213.248/29,74.92.146.88/29,80.77.101.80/28,80.77.106.80/28,82.150.19.192/27,83.16.168.136/30,84.243.19.80/28,87.102.26.208/30,124.30.5.96/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000365; rev:2307;) drop ip [144.223.143.231/25,144.223.143.232/29,144.223.143.240/25,144.228.188.31/25,144.228.188.32/30,144.228.188.36/31,144.232.186.0/24,144.232.247.163/25,144.232.247.164/30,144.232.247.168/25,160.81.168.119/25,160.81.168.120/30,160.81.168.124/25,160.81.221.0/24,192.43.161.0/24,193.85.160.96/29,193.173.4.40/29,194.123.254.136/29,194.151.136.168/29,195.56.0.143/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000366; rev:2307;) drop ip [195.114.126.0/23,202.122.134.0/23,203.98.195.48/28,203.125.103.64/27,203.222.38.195/25,203.222.38.196/30,203.222.38.200/25,203.222.42.112/28,204.96.216.8/29,207.175.53.0/24,207.175.173.0/24,207.175.178.0/23,208.10.23.0/24,208.10.29.0/24,208.18.20.80/28,208.25.8.192/28,209.5.125.64/28,209.184.250.0/24,209.218.80.64/26,210.17.236.0/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000367; rev:2307;) drop ip [212.47.8.180/30,212.47.8.184/29,212.47.8.192/27,212.47.8.224/30,212.47.8.228/25,212.50.173.128/28,213.53.62.231/25,213.53.62.232/30,213.53.62.236/31,213.53.67.0/28,213.206.132.128/27,216.17.25.224/27,216.17.45.112/29,216.17.46.248/29,216.17.81.240/28,216.17.94.96/29,216.60.244.0/25,216.61.241.0/24,216.195.215.0/26,217.149.45.48/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000368; rev:2307;) drop ip [219.101.184.128/26,220.99.83.70/25,220.232.184.192/26,38.99.213.232/29,38.99.223.144/30,38.100.15.0/24,38.100.19.192/26,38.100.20.0/28,38.100.24.0/22,38.100.130.192/29,38.100.134.0/23,38.103.28.0/24,61.135.144.0/24,61.199.239.120/29,62.233.130.0/29,62.233.137.0/24,63.144.28.160/28,63.147.23.224/27,63.165.74.64/28,63.175.161.56/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000369; rev:2307;) drop ip [63.226.99.88/29,64.52.125.64/27,64.167.213.184/29,64.217.133.80/29,65.113.38.0/27,65.116.50.224/27,65.163.76.0/22,65.219.252.128/25,66.47.167.32/29,66.246.249.0/27,67.15.221.32/29,67.15.221.40/31,67.15.221.150/31,67.15.221.152/29,67.15.221.160/30,67.15.222.0/23,67.15.222.2/31,67.15.222.4/30,67.15.222.8/29,67.15.222.16/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000370; rev:2307;) drop ip [67.15.222.40/31,67.15.222.101/25,67.15.222.102/31,67.15.222.104/29,67.15.222.112/28,67.15.222.128/29,67.15.222.136/30,67.15.222.140/25,67.15.223.2/31,67.15.223.4/30,67.15.223.8/29,67.15.223.16/28,67.15.223.32/29,67.15.223.40/31,67.15.223.101/25,67.15.223.102/31,67.15.223.104/29,67.15.223.112/28,67.15.223.128/29,67.15.223.136/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000371; rev:2307;) drop ip [67.15.224.2/31,67.15.224.4/30,67.15.224.8/29,67.15.224.16/28,67.15.224.111/25,67.15.224.112/28,67.15.224.128/29,67.15.224.136/30,67.15.224.140/25,67.40.71.16/29,67.111.170.0/24,67.111.171.48/30,67.111.181.244/30,67.133.231.192/29,67.158.124.128/29,67.210.162.160/28,68.255.85.152/29,69.233.179.240/29,70.85.245.232/29,70.85.245.240/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000372; rev:2307;) drop ip [74.86.146.244/30,74.86.213.248/29,74.92.146.88/29,80.77.101.80/28,80.77.106.80/28,82.150.19.192/27,83.16.168.136/30,84.243.19.80/28,87.102.26.208/30,124.30.5.96/27,125.19.41.128/28,144.223.143.231/25,144.223.143.232/29,144.223.143.240/25,144.228.188.31/25,144.228.188.32/30,144.228.188.36/31,144.232.186.0/24,144.232.247.163/25,144.232.247.164/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000373; rev:2307;) drop ip [160.81.168.119/25,160.81.168.120/30,160.81.168.124/25,160.81.221.0/24,173.45.114.42/25,192.43.161.0/24,193.85.160.96/29,193.173.4.40/29,194.123.254.136/29,194.151.136.168/29,195.56.0.143/25,195.84.205.0/28,195.114.126.0/23,202.122.134.0/23,203.98.195.48/28,203.125.103.64/27,203.222.38.195/25,203.222.38.196/30,203.222.38.200/25,203.222.42.112/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000374; rev:2307;) drop ip [207.175.53.0/24,207.175.173.0/24,207.175.178.0/23,208.10.23.0/24,208.10.29.0/24,208.18.20.80/28,208.25.8.192/28,209.5.125.64/28,209.184.250.0/24,209.218.80.64/26,210.17.236.0/29,212.47.8.179/25,212.47.8.180/30,212.47.8.184/29,212.47.8.192/27,212.47.8.224/30,212.47.8.228/25,212.50.173.128/28,213.53.62.231/25,213.53.62.232/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000375; rev:2307;) drop ip [213.53.67.0/28,213.206.132.128/27,216.17.25.224/27,216.17.45.112/29,216.17.46.248/29,216.17.81.240/28,216.17.94.96/29,216.60.244.0/25,216.61.241.0/24,216.195.215.0/26,217.149.45.48/28,217.149.45.96/27,219.101.184.128/26,220.99.83.70/25,220.232.184.192/26,38.100.15.0/24,38.100.19.192/26,38.100.20.0/28,38.100.24.0/22,38.100.130.192/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000376; rev:2307;) drop ip [38.103.28.0/24,60.32.3.96/29,61.135.144.0/24,61.199.239.120/29,62.233.130.0/29,62.233.137.0/24,63.144.28.160/28,63.147.23.224/27,63.165.74.64/28,63.175.161.56/29,63.206.250.216/29,63.226.99.88/29,64.52.125.64/27,64.167.213.184/29,64.217.133.80/29,65.113.38.0/27,65.116.50.224/27,65.120.84.0/24,65.163.76.0/22,65.219.252.128/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000377; rev:2307;) drop ip [66.47.167.32/29,66.246.249.0/27,67.15.221.0/24,67.15.222.0/23,67.15.224.0/24,67.40.71.16/29,67.111.170.0/24,67.111.171.48/30,67.111.181.244/30,67.133.231.192/29,67.158.124.128/29,67.210.162.160/28,68.255.85.152/29,69.28.229.32/25,69.28.229.48/25,69.28.229.56/25,69.28.229.64/25,69.28.229.72/25,69.28.229.128/25,69.233.179.240/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000378; rev:2307;) drop ip [70.85.245.240/29,71.4.164.0/24,74.86.146.244/30,74.86.213.248/29,74.92.146.88/29,80.77.101.80/28,80.77.106.80/28,80.85.33.0/24,80.254.137.80/25,80.254.137.240/25,82.150.19.192/27,83.16.168.136/30,83.68.3.32/25,87.102.26.208/30,92.68.153.0/29,116.12.47.0/24,118.22.18.0/29,124.30.5.96/27,125.19.41.128/28,144.223.143.231/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000379; rev:2307;) drop ip [144.223.143.240/25,144.228.188.31/25,144.228.188.32/30,144.228.188.36/31,144.232.186.0/24,144.232.247.163/25,144.232.247.164/30,144.232.247.168/25,160.81.168.119/25,160.81.168.120/30,160.81.168.124/25,160.81.221.0/24,192.43.161.0/24,192.83.249.160/25,193.85.160.96/29,193.173.4.40/29,194.123.254.136/29,194.151.136.168/29,195.56.0.143/25,195.84.205.0/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000380; rev:2307;) drop ip [202.122.134.0/23,203.98.195.48/28,203.125.103.64/27,203.222.38.195/25,203.222.38.196/30,203.222.38.200/25,203.222.42.112/28,204.96.216.8/29,207.175.53.0/24,207.175.173.0/24,207.175.178.0/23,208.10.23.0/24,208.10.29.0/24,208.18.20.80/28,208.25.8.192/28,209.5.125.64/28,209.184.250.0/24,209.218.80.64/26,210.17.236.0/29,212.47.8.179/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000381; rev:2307;) drop ip [212.47.8.184/29,212.47.8.192/27,212.47.8.224/30,212.47.8.228/25,212.50.173.128/28,212.179.235.0/24,212.179.236.0/22,213.53.62.231/25,213.53.62.232/30,213.53.62.236/31,213.53.67.0/28,213.206.132.128/27,216.17.18.64/26,216.17.25.224/27,216.17.45.112/29,216.17.46.248/29,216.17.81.240/28,216.17.94.96/29,216.60.244.0/25,216.61.241.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000382; rev:2307;) drop ip [217.149.45.48/28,217.149.45.96/27,219.101.184.128/26,220.99.83.70/25,220.232.184.192/26,69.154.45.24/29,192.43.161.0/24,38.99.213.232/29,38.99.223.144/30,38.100.15.0/24,38.100.19.192/26,38.100.20.0/28,38.100.24.0/22,38.100.130.192/29,38.100.134.0/23,38.103.28.0/24,61.135.144.0/24,61.199.239.120/29,62.233.130.0/29,62.233.137.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000383; rev:2307;) drop ip [63.147.23.224/27,63.165.74.64/28,63.175.161.56/29,63.206.250.216/29,63.226.99.88/29,64.52.125.64/27,64.167.213.184/29,64.217.133.80/29,65.113.38.0/27,65.116.50.224/27,65.163.76.0/22,65.219.252.128/25,66.47.167.32/29,66.246.249.0/27,67.15.221.32/29,67.15.221.40/31,67.15.221.150/31,67.15.221.152/29,67.15.221.160/30,67.15.222.0/23] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000384; rev:2307;) drop ip [67.15.222.4/30,67.15.222.8/29,67.15.222.16/28,67.15.222.32/29,67.15.222.40/31,67.15.222.101/25,67.15.222.102/31,67.15.222.104/29,67.15.222.112/28,67.15.222.128/29,67.15.222.136/30,67.15.222.140/25,67.15.223.2/31,67.15.223.4/30,67.15.223.8/29,67.15.223.16/28,67.15.223.32/29,67.15.223.40/31,67.15.223.101/25,67.15.223.102/31] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000385; rev:2307;) drop ip [67.15.223.112/28,67.15.223.128/29,67.15.223.136/30,67.15.223.140/25,67.15.224.2/31,67.15.224.4/30,67.15.224.8/29,67.15.224.16/28,67.15.224.111/25,67.15.224.112/28,67.15.224.128/29,67.15.224.136/30,67.15.224.140/25,67.40.71.16/29,67.111.170.0/24,67.111.171.48/30,67.111.181.244/30,67.133.231.192/29,67.158.124.128/29,67.210.162.160/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000386; rev:2307;) drop ip [69.233.179.240/29,70.85.245.232/29,70.85.245.240/29,71.4.164.0/24,74.86.146.244/30,74.86.213.248/29,74.92.146.88/29,80.77.101.80/28,80.77.106.80/28,82.150.19.192/27,83.16.168.136/30,84.243.19.80/28,87.102.26.208/30,124.30.5.96/27,125.19.41.128/28,144.223.143.231/25,144.223.143.232/29,144.223.143.240/25,144.228.188.31/25,144.228.188.32/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000387; rev:2307;) drop ip [144.232.186.0/24,144.232.247.163/25,144.232.247.164/30,144.232.247.168/25,160.81.168.119/25,160.81.168.120/30,160.81.168.124/25,160.81.221.0/24,173.45.114.42/25,192.43.161.0/24,193.85.160.96/29,193.173.4.40/29,194.123.254.136/29,194.151.136.168/29,195.56.0.143/25,195.84.205.0/28,195.114.126.0/23,202.122.134.0/23,203.98.195.48/28,203.125.103.64/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000388; rev:2307;) drop ip [203.222.38.196/30,203.222.38.200/25,203.222.42.112/28,204.96.216.8/29,207.175.53.0/24,207.175.173.0/24,207.175.178.0/23,208.10.23.0/24,208.10.29.0/24,208.18.20.80/28,208.25.8.192/28,209.5.125.64/28,209.184.250.0/24,209.218.80.64/26,210.17.236.0/29,212.47.8.179/25,212.47.8.180/30,212.47.8.184/29,212.47.8.192/27,212.47.8.224/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000389; rev:2307;) drop ip [212.50.173.128/28,213.53.62.231/25,213.53.62.232/30,213.53.62.236/31,213.53.67.0/28,213.206.132.128/27,216.17.25.224/27,216.17.45.112/29,216.17.46.248/29,216.17.81.240/28,216.17.94.96/29,216.60.244.0/25,216.61.241.0/24,216.195.215.0/26,217.149.45.48/28,217.149.45.96/27,219.101.184.128/26,220.99.83.70/25,220.232.184.192/26,38.100.15.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000390; rev:2307;) drop ip [38.100.20.0/28,38.100.24.0/22,38.100.130.192/29,38.100.134.0/23,38.103.28.0/24,60.32.3.96/29,61.135.144.0/24,61.199.239.120/29,62.233.130.0/29,62.233.137.0/24,63.144.28.160/28,63.147.23.224/27,63.165.74.64/28,63.175.161.56/29,63.206.250.216/29,63.226.99.88/29,64.52.125.64/27,64.167.213.184/29,64.217.133.80/29,65.113.38.0/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000391; rev:2307;) drop ip [65.120.84.0/24,65.163.76.0/22,65.219.252.128/25,66.35.111.73/25,66.47.167.32/29,66.246.249.0/27,67.15.221.0/24,67.15.222.0/23,67.15.224.0/24,67.40.71.16/29,67.111.170.0/24,67.111.171.48/30,67.111.181.244/30,67.133.231.192/29,67.158.124.128/29,67.210.162.160/28,68.255.85.152/29,69.28.229.32/25,69.28.229.48/25,69.28.229.56/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000392; rev:2307;) drop ip [69.28.229.72/25,69.28.229.128/25,69.233.179.240/29,70.85.245.232/29,70.85.245.240/29,71.4.164.0/24,74.86.146.244/30,74.86.213.248/29,74.92.146.88/29,80.77.101.80/28,80.77.106.80/28,80.85.33.0/24,80.254.137.80/25,80.254.137.240/25,82.150.19.192/27,83.16.168.136/30,83.68.3.32/25,87.102.26.208/30,92.68.153.0/29,116.12.47.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000393; rev:2307;) drop ip [124.30.5.96/27,125.19.41.128/28,144.223.143.231/25,144.223.143.232/29,144.223.143.240/25,144.228.188.31/25,144.228.188.32/30,144.228.188.36/31,144.232.186.0/24,144.232.247.163/25,144.232.247.164/30,144.232.247.168/25,160.81.168.119/25,160.81.168.120/30,160.81.168.124/25,160.81.221.0/24,192.43.161.0/24,192.83.249.160/25,193.85.160.96/29,193.173.4.40/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000394; rev:2307;) drop ip [194.151.136.168/29,195.56.0.143/25,195.84.205.0/28,195.114.126.0/23,202.122.134.0/23,203.98.195.48/28,203.125.103.64/27,203.222.38.195/25,203.222.38.196/30,203.222.38.200/25,203.222.42.112/28,204.96.216.8/29,207.175.53.0/24,207.175.173.0/24,207.175.178.0/23,208.10.23.0/24,208.10.29.0/24,208.18.20.80/28,208.25.8.192/28,209.5.125.64/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000395; rev:2307;) drop ip [209.218.80.64/26,210.17.236.0/29,212.47.8.179/25,212.47.8.180/30,212.47.8.184/29,212.47.8.192/27,212.47.8.224/30,212.47.8.228/25,212.50.173.128/28,212.179.235.0/24,212.179.236.0/22,213.53.62.231/25,213.53.62.232/30,213.53.62.236/31,213.53.67.0/28,213.206.132.128/27,216.17.18.64/26,216.17.25.224/27,216.17.45.112/29,216.17.46.248/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000396; rev:2307;) drop ip [216.17.94.96/29,216.60.244.0/25,216.61.241.0/24,216.195.215.0/26,217.149.45.48/28,217.149.45.96/27,219.101.184.128/26,220.99.83.70/25,220.232.184.192/26,69.154.45.24/29,192.43.161.0/24,64.5.62.16/29,67.19.76.16/29,67.19.145.184/29,67.19.195.32/27,67.19.195.64/28,67.19.195.240/28,67.19.198.16/28,67.19.198.32/29,67.19.198.48/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000397; rev:2307;) drop ip [67.19.199.32/28,67.19.199.96/27,67.19.203.168/29,67.19.203.176/28,67.19.203.192/28,74.52.138.216/29,74.55.55.64/26,74.55.55.128/27,74.55.62.16/28,74.55.62.32/27,74.55.62.128/25,75.125.165.96/28,80.63.58.96/25,80.199.118.192/29,174.133.137.48/28,174.133.137.64/26,174.133.137.128/26,64.5.62.16/29,67.18.111.32/28,67.18.213.48/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000398; rev:2307;) drop ip [67.18.243.96/28,67.18.243.112/29,67.18.243.120/31,67.19.5.24/29,67.19.5.64/29,67.19.5.104/29,67.19.16.0/29,67.19.16.8/31,67.19.22.16/29,67.19.22.24/31,67.19.44.160/28,67.19.45.40/29,67.19.45.144/29,67.19.45.160/29,67.19.74.192/29,67.19.74.248/29,67.19.76.16/29,67.19.89.32/27,67.19.89.64/28,67.19.133.192/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000399; rev:2307;) drop ip [67.19.153.192/28,67.19.187.215/25,67.19.187.216/29,67.19.187.224/31,67.19.192.224/29,67.19.195.32/27,67.19.195.64/28,67.19.195.95/25,67.19.195.96/29,67.19.195.104/31,67.19.195.120/29,67.19.195.144/28,67.19.195.160/28,67.19.195.240/28,67.19.198.16/28,67.19.198.32/29,67.19.198.48/28,67.19.198.80/28,67.19.198.224/27,67.19.199.32/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000400; rev:2307;) drop ip [67.19.203.168/29,67.19.203.176/28,67.19.203.192/28,67.19.249.152/29,67.228.165.104/29,67.228.166.248/30,69.61.21.136/29,70.84.0.56/29,70.84.0.96/28,70.84.0.160/29,70.84.0.240/28,70.84.1.168/29,70.84.1.176/28,70.84.1.224/27,70.84.2.160/27,70.84.2.192/27,70.84.2.224/29,70.84.3.96/28,70.84.3.120/29,70.84.3.176/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000401; rev:2307;) drop ip [70.84.4.144/29,70.84.4.248/29,70.84.5.24/29,70.84.5.32/29,70.84.16.16/28,70.84.16.160/27,70.84.16.224/28,70.84.17.128/26,70.84.17.208/28,70.84.17.224/27,70.84.18.112/28,70.84.18.128/28,70.84.18.192/26,70.84.28.64/27,70.84.28.112/28,70.84.28.128/29,70.84.61.96/28,70.84.61.128/27,70.84.61.176/28,70.84.61.192/26] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000402; rev:2307;) drop ip [70.84.194.24/29,70.84.212.168/29,70.84.214.144/29,70.85.110.0/29,70.85.150.40/29,70.85.160.168/29,70.85.163.16/29,70.85.163.24/29,70.85.163.32/28,70.85.163.48/25,70.85.169.144/29,70.85.169.240/29,70.85.170.128/29,70.85.170.168/29,70.85.170.192/29,70.85.170.248/29,70.85.184.88/29,70.86.18.208/29,70.86.30.224/27,70.86.31.24/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000403; rev:2307;) drop ip [70.86.45.192/25,70.86.55.248/29,70.86.58.120/29,70.86.59.80/29,70.86.93.144/28,70.86.96.224/28,70.86.96.240/25,70.86.107.232/29,70.86.114.32/29,70.86.134.112/28,70.86.134.128/25,70.86.138.0/29,70.87.15.88/29,70.87.161.64/29,74.52.6.240/29,74.52.83.64/29,74.52.137.40/29,74.52.137.160/27,74.52.138.8/29,74.52.138.96/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000404; rev:2307;) drop ip [74.52.139.8/29,74.52.140.40/29,74.52.140.88/29,74.53.24.96/29,74.55.41.144/29,74.55.53.136/29,74.55.55.64/26,74.55.55.128/27,74.55.61.0/28,74.55.61.112/28,74.55.62.16/28,74.55.62.32/27,74.55.62.128/25,74.55.135.168/29,74.55.152.16/29,74.55.207.232/29,74.55.247.192/29,75.125.32.208/29,75.125.106.176/28,75.125.165.96/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000405; rev:2307;) drop ip [75.125.191.144/25,75.125.233.232/29,75.125.244.80/29,75.125.245.240/28,80.63.58.96/25,80.199.118.192/29,174.123.217.168/29,174.123.217.176/28,174.123.217.200/29,174.123.248.224/29,174.132.50.0/29,174.132.51.0/29,174.132.62.80/29,174.132.62.112/29,174.132.90.64/29,174.132.238.24/29,174.133.26.144/29,174.133.32.88/29,174.133.32.184/29,174.133.33.48/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000406; rev:2307;) drop ip [174.133.46.48/29,174.133.46.72/29,174.133.64.88/29,174.133.64.96/29,174.133.83.96/29,174.133.83.136/29,174.133.83.160/29,174.133.83.176/29,174.133.83.224/29,174.133.108.216/29,174.133.112.112/29,174.133.112.176/28,174.133.126.192/29,174.133.137.48/28,174.133.137.64/26,174.133.137.128/26,174.133.152.0/29,174.133.152.24/29,174.133.195.0/28,174.133.196.184/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000407; rev:2307;) drop ip [174.133.205.248/29,174.133.206.32/28,174.133.241.32/29,174.133.242.24/29,174.133.242.176/29,174.133.243.184/29,174.133.254.112/29,174.133.254.192/28,207.44.255.160/28,209.62.63.0/28,38.107.210.0/24,64.5.53.128/25,64.5.62.16/29,67.18.111.40/29,67.18.213.48/29,67.18.243.112/29,67.19.5.24/29,67.19.5.64/29,67.19.5.104/29,67.19.16.0/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000408; rev:2307;) drop ip [67.19.41.128/29,67.19.41.184/29,67.19.44.160/28,67.19.45.40/29,67.19.45.144/29,67.19.45.160/29,67.19.74.192/29,67.19.74.248/29,67.19.76.16/29,67.19.89.32/27,67.19.89.64/28,67.19.133.192/27,67.19.145.184/29,67.19.153.192/28,67.19.187.216/29,67.19.192.224/29,67.19.195.32/27,67.19.195.64/28,67.19.195.96/29,67.19.195.120/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000409; rev:2307;) drop ip [67.19.195.160/28,67.19.195.240/28,67.19.198.16/28,67.19.198.32/29,67.19.198.48/28,67.19.198.80/28,67.19.198.224/27,67.19.199.32/28,67.19.199.96/27,67.19.203.168/29,67.19.203.176/28,67.19.203.192/28,67.19.249.152/29,67.228.165.104/29,67.228.166.248/30,69.61.21.136/29,70.84.0.56/29,70.84.0.96/28,70.84.0.160/29,70.84.0.240/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000410; rev:2307;) drop ip [70.84.1.176/28,70.84.1.224/27,70.84.2.160/27,70.84.2.192/27,70.84.2.224/29,70.84.3.96/28,70.84.3.120/29,70.84.3.176/28,70.84.4.136/29,70.84.4.144/29,70.84.4.248/29,70.84.5.24/29,70.84.5.32/29,70.84.16.16/28,70.84.16.160/27,70.84.16.224/28,70.84.17.128/26,70.84.17.208/28,70.84.17.224/27,70.84.18.112/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000411; rev:2307;) drop ip [70.84.18.192/26,70.84.28.64/27,70.84.28.112/28,70.84.28.128/29,70.84.61.96/28,70.84.61.128/27,70.84.61.176/28,70.84.61.192/26,70.84.188.64/28,70.84.194.24/29,70.84.212.168/29,70.84.214.144/29,70.85.110.0/29,70.85.150.40/29,70.85.160.168/29,70.85.163.16/29,70.85.163.24/29,70.85.163.40/29,70.85.169.144/29,70.85.169.240/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000412; rev:2307;) drop ip [70.85.170.168/29,70.85.170.192/29,70.85.170.248/29,70.85.184.88/29,70.86.18.208/29,70.86.30.224/27,70.86.31.24/29,70.86.45.176/29,70.86.55.248/29,70.86.58.120/29,70.86.59.80/29,70.86.93.144/28,70.86.96.224/29,70.86.107.232/29,70.86.114.32/29,70.86.134.112/29,70.86.138.0/29,70.87.15.88/29,70.87.161.64/29,74.52.6.240/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000413; rev:2307;) drop ip [74.52.137.40/29,74.52.137.160/27,74.52.138.8/29,74.52.138.96/28,74.52.138.216/29,74.52.139.8/29,74.52.140.40/29,74.52.140.88/29,74.53.24.96/29,74.55.41.144/29,74.55.53.136/29,74.55.55.64/26,74.55.55.128/27,74.55.61.0/28,74.55.61.112/28,74.55.62.16/28,74.55.62.32/27,74.55.62.128/25,74.55.135.168/29,74.55.152.16/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000414; rev:2307;) drop ip [74.55.247.192/29,75.125.32.208/29,75.125.106.176/28,75.125.165.96/28,75.125.191.128/29,75.125.233.232/29,75.125.244.80/29,75.125.245.240/28,80.63.58.96/25,80.199.118.192/29,174.123.217.168/29,174.123.217.176/28,174.123.217.200/29,174.123.248.224/29,174.132.50.0/29,174.132.51.0/29,174.132.62.80/29,174.132.62.112/29,174.132.90.64/29,174.132.238.24/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000415; rev:2307;) drop ip [174.133.32.88/29,174.133.32.184/29,174.133.33.48/29,174.133.45.232/29,174.133.46.48/29,174.133.46.72/29,174.133.64.88/29,174.133.64.96/29,174.133.83.96/29,174.133.83.136/29,174.133.83.160/29,174.133.83.176/29,174.133.83.224/29,174.133.108.216/29,174.133.112.112/29,174.133.112.176/28,174.133.126.192/29,174.133.137.48/28,174.133.137.64/26,174.133.137.128/26] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000416; rev:2307;) drop ip [174.133.152.24/29,174.133.195.0/28,174.133.196.184/29,174.133.205.224/28,174.133.205.248/29,174.133.206.32/28,174.133.241.32/29,174.133.242.24/29,174.133.242.176/29,174.133.243.184/29,174.133.254.112/29,174.133.254.192/28,207.44.255.160/28,209.62.63.0/28,209.130.152.234/25,64.5.62.16/29,67.18.111.32/28,67.18.213.48/29,67.18.213.56/25,67.18.243.96/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000417; rev:2307;) drop ip [67.18.243.120/31,67.19.5.24/29,67.19.5.64/29,67.19.5.104/29,67.19.16.0/29,67.19.16.8/31,67.19.22.16/29,67.19.22.24/31,67.19.44.160/28,67.19.45.40/29,67.19.45.144/29,67.19.45.160/29,67.19.74.192/29,67.19.74.248/29,67.19.76.16/29,67.19.89.32/27,67.19.89.64/28,67.19.133.192/27,67.19.145.184/29,67.19.153.192/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000418; rev:2307;) drop ip [67.19.187.216/29,67.19.187.224/31,67.19.192.224/29,67.19.195.32/27,67.19.195.64/28,67.19.195.95/25,67.19.195.96/29,67.19.195.104/31,67.19.195.120/29,67.19.195.144/28,67.19.195.160/28,67.19.195.240/28,67.19.198.16/28,67.19.198.32/29,67.19.198.48/28,67.19.198.80/28,67.19.198.224/27,67.19.199.32/28,67.19.199.96/27,67.19.203.168/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000419; rev:2307;) drop ip [67.19.203.192/28,67.19.249.152/29,67.228.165.104/29,67.228.166.248/30,69.61.21.136/29,70.84.0.56/29,70.84.0.96/28,70.84.0.160/29,70.84.0.240/28,70.84.1.168/29,70.84.1.176/28,70.84.1.224/27,70.84.2.160/27,70.84.2.192/27,70.84.2.224/29,70.84.3.96/28,70.84.3.120/29,70.84.3.176/28,70.84.4.136/29,70.84.4.144/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000420; rev:2307;) drop ip [70.84.5.24/29,70.84.5.32/29,70.84.16.16/28,70.84.16.160/27,70.84.16.224/28,70.84.17.128/26,70.84.17.208/28,70.84.17.224/27,70.84.18.112/28,70.84.18.128/28,70.84.18.192/26,70.84.28.64/27,70.84.28.112/28,70.84.28.128/29,70.84.61.96/28,70.84.61.128/27,70.84.61.176/28,70.84.61.192/26,70.84.188.64/28,70.84.194.24/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000421; rev:2307;) drop ip [70.84.214.144/29,70.85.110.0/29,70.85.150.40/29,70.85.160.168/29,70.85.163.16/29,70.85.163.24/29,70.85.163.32/28,70.85.163.48/25,70.85.169.144/29,70.85.169.240/29,70.85.170.128/29,70.85.170.168/29,70.85.170.192/29,70.85.170.248/29,70.85.184.88/29,70.86.18.208/29,70.86.30.224/27,70.86.31.24/29,70.86.45.176/28,70.86.45.192/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000422; rev:2307;) drop ip [70.86.58.120/29,70.86.59.80/29,70.86.93.144/28,70.86.96.224/28,70.86.96.240/25,70.86.107.232/29,70.86.114.32/29,70.86.134.112/28,70.86.134.128/25,70.86.138.0/29,70.87.15.88/29,70.87.161.64/29,74.52.6.240/29,74.52.83.64/29,74.52.137.40/29,74.52.137.160/27,74.52.138.8/29,74.52.138.96/28,74.52.138.216/29,74.52.139.8/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000423; rev:2307;) drop ip [74.52.140.88/29,74.53.24.96/29,74.55.41.144/29,74.55.53.136/29,74.55.55.64/26,74.55.55.128/27,74.55.61.0/28,74.55.61.112/28,74.55.62.16/28,74.55.62.32/27,74.55.62.128/25,74.55.135.168/29,74.55.152.16/29,74.55.207.232/29,74.55.247.192/29,75.125.32.208/29,75.125.106.176/28,75.125.165.96/28,75.125.191.128/28,75.125.191.144/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000424; rev:2307;) drop ip [75.125.244.80/29,75.125.245.240/28,80.63.58.96/25,80.199.118.192/29,174.123.217.168/29,174.123.217.176/28,174.123.217.200/29,174.123.248.224/29,174.132.50.0/29,174.132.51.0/29,174.132.62.80/29,174.132.62.112/29,174.132.90.64/29,174.132.238.24/29,174.133.26.144/29,174.133.32.88/29,174.133.32.184/29,174.133.33.48/29,174.133.45.232/29,174.133.46.48/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000425; rev:2307;) drop ip [174.133.64.88/29,174.133.64.96/29,174.133.83.96/29,174.133.83.136/29,174.133.83.160/29,174.133.83.176/29,174.133.83.224/29,174.133.108.216/29,174.133.112.112/29,174.133.112.176/28,174.133.126.192/29,174.133.137.48/28,174.133.137.64/26,174.133.137.128/26,174.133.152.0/29,174.133.152.24/29,174.133.195.0/28,174.133.196.184/29,174.133.205.224/28,174.133.205.248/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000426; rev:2307;) drop ip [174.133.241.32/29,174.133.242.24/29,174.133.242.176/29,174.133.243.184/29,174.133.254.112/29,174.133.254.192/28,207.44.255.160/28,209.62.63.0/28,38.107.210.0/24,64.5.53.128/25,64.5.62.16/29,64.246.12.88/29,67.15.252.0/26,67.18.111.40/29,67.18.130.40/29,67.18.135.208/29,67.18.147.216/29,67.18.148.56/29,67.18.178.96/29,67.18.213.48/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000427; rev:2307;) drop ip [67.18.234.144/29,67.18.237.16/28,67.18.239.136/29,67.18.243.48/29,67.18.243.112/29,67.18.253.32/29,67.18.254.64/29,67.19.5.24/29,67.19.5.64/29,67.19.5.104/29,67.19.7.248/29,67.19.8.160/29,67.19.16.0/29,67.19.21.232/29,67.19.22.16/29,67.19.28.128/29,67.19.37.192/29,67.19.37.224/29,67.19.41.128/29,67.19.41.184/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000428; rev:2307;) drop ip [67.19.45.40/29,67.19.45.144/29,67.19.45.160/29,67.19.55.120/29,67.19.74.192/29,67.19.74.208/29,67.19.74.248/29,67.19.75.96/29,67.19.76.16/29,67.19.79.96/29,67.19.86.8/29,67.19.89.32/27,67.19.89.64/28,67.19.102.120/29,67.19.116.64/28,67.19.117.0/29,67.19.117.216/29,67.19.118.112/29,67.19.122.232/29,67.19.126.128/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000429; rev:2307;) drop ip [67.19.131.192/29,67.19.133.32/28,67.19.133.192/27,67.19.136.64/29,67.19.145.184/29,67.19.147.48/29,67.19.152.224/29,67.19.153.96/29,67.19.153.192/28,67.19.154.128/28,67.19.158.64/28,67.19.159.16/29,67.19.164.0/29,67.19.173.64/29,67.19.180.0/29,67.19.182.240/29,67.19.183.152/29,67.19.185.112/29,67.19.187.216/29,67.19.189.80/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000430; rev:2307;) drop ip [67.19.192.224/29,67.19.195.32/27,67.19.195.64/28,67.19.195.96/29,67.19.195.120/29,67.19.195.144/28,67.19.195.160/28,67.19.195.240/28,67.19.198.16/28,67.19.198.32/29,67.19.198.48/28,67.19.198.80/28,67.19.198.224/27,67.19.199.32/28,67.19.199.96/27,67.19.203.168/29,67.19.203.176/28,67.19.203.192/28,67.19.210.208/29,67.19.242.192/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000431; rev:2307;) drop ip [67.228.165.104/29,67.228.166.248/30,69.56.250.128/27,69.61.21.136/29,69.89.25.190/25,69.93.64.192/29,70.84.0.0/28,70.84.0.48/28,70.84.0.96/28,70.84.0.160/29,70.84.0.192/28,70.84.0.240/28,70.84.1.88/29,70.84.1.168/29,70.84.1.176/28,70.84.1.224/27,70.84.2.16/28,70.84.2.96/28,70.84.2.160/27,70.84.2.192/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000432; rev:2307;) drop ip [70.84.2.248/29,70.84.3.0/28,70.84.3.96/28,70.84.3.120/29,70.84.3.176/28,70.84.4.136/29,70.84.4.144/29,70.84.4.192/29,70.84.4.248/29,70.84.5.16/28,70.84.5.32/29,70.84.16.16/28,70.84.16.112/28,70.84.16.160/27,70.84.16.224/28,70.84.17.64/28,70.84.17.128/26,70.84.17.208/28,70.84.17.224/27,70.84.18.32/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000433; rev:2307;) drop ip [70.84.18.112/28,70.84.18.128/28,70.84.18.192/26,70.84.19.176/28,70.84.19.208/28,70.84.19.240/28,70.84.28.64/27,70.84.28.112/28,70.84.28.128/29,70.84.61.96/28,70.84.61.128/27,70.84.61.176/28,70.84.61.192/26,70.84.176.216/29,70.84.185.0/28,70.84.185.136/29,70.84.188.64/28,70.84.193.48/29,70.84.193.144/29,70.84.193.208/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000434; rev:2307;) drop ip [70.84.194.24/29,70.84.195.32/28,70.84.204.32/28,70.84.205.8/29,70.84.206.80/29,70.84.212.168/29,70.84.214.144/29,70.84.216.88/29,70.84.220.224/28,70.85.109.16/29,70.85.110.0/29,70.85.115.112/29,70.85.150.40/29,70.85.160.168/29,70.85.163.16/29,70.85.163.24/29,70.85.163.40/29,70.85.169.144/29,70.85.169.240/29,70.85.170.128/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000435; rev:2307;) drop ip [70.85.170.192/29,70.85.170.248/29,70.85.184.88/29,70.86.0.56/29,70.86.4.16/29,70.86.4.48/28,70.86.4.248/29,70.86.7.8/29,70.86.16.184/29,70.86.18.0/29,70.86.18.208/28,70.86.30.224/27,70.86.31.24/29,70.86.40.80/29,70.86.45.176/29,70.86.55.248/29,70.86.58.120/29,70.86.59.80/29,70.86.93.144/28,70.86.95.104/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000436; rev:2307;) drop ip [70.86.98.200/29,70.86.107.232/29,70.86.114.32/29,70.86.133.48/29,70.86.134.112/29,70.86.138.0/29,70.86.139.24/29,70.87.15.88/29,70.87.135.160/29,70.87.161.64/29,70.87.161.80/29,70.87.242.48/29,70.87.242.96/29,70.87.242.152/29,70.87.242.208/28,70.87.242.232/29,70.87.242.248/29,70.87.243.16/28,70.87.243.32/28,70.87.243.48/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000437; rev:2307;) drop ip [74.52.6.240/29,74.52.16.16/29,74.52.17.136/29,74.52.31.72/29,74.52.44.48/28,74.52.83.64/29,74.52.90.160/29,74.52.100.8/29,74.52.129.56/29,74.52.131.232/29,74.52.133.192/29,74.52.135.184/29,74.52.136.32/29,74.52.137.40/29,74.52.137.160/27,74.52.138.8/29,74.52.138.96/28,74.52.138.216/29,74.52.139.8/29,74.52.140.40/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000438; rev:2307;) drop ip [74.52.170.176/29,74.52.171.64/29,74.53.24.96/29,74.53.44.112/29,74.53.96.56/29,74.53.105.56/29,74.55.23.8/29,74.55.23.16/29,74.55.25.240/29,74.55.38.88/29,74.55.41.144/29,74.55.42.88/29,74.55.51.0/29,74.55.53.136/29,74.55.55.64/26,74.55.55.128/27,74.55.61.0/28,74.55.61.112/28,74.55.62.16/28,74.55.62.32/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000439; rev:2307;) drop ip [74.55.83.192/28,74.55.92.56/29,74.55.93.216/29,74.55.128.192/28,74.55.135.168/29,74.55.137.160/29,74.55.152.16/29,74.55.179.224/29,74.55.207.232/29,74.55.230.0/29,74.55.245.144/28,74.55.245.168/29,74.55.247.192/29,74.55.249.200/29,75.125.32.208/29,75.125.106.176/28,75.125.136.240/29,75.125.140.8/29,75.125.164.8/29,75.125.165.96/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000440; rev:2307;) drop ip [75.125.198.200/29,75.125.208.240/29,75.125.233.232/29,75.125.239.32/29,75.125.241.8/29,75.125.244.80/29,75.125.245.240/28,75.125.252.32/28,80.199.118.192/29,174.123.46.8/29,174.123.46.16/28,174.123.78.128/29,174.123.79.56/29,174.123.88.208/28,174.123.89.208/29,174.123.101.32/28,174.123.103.16/29,174.123.103.136/29,174.123.110.184/29,174.123.141.0/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000441; rev:2307;) drop ip [174.123.217.168/29,174.123.217.176/28,174.123.217.200/29,174.123.247.224/29,174.123.248.48/29,174.123.248.224/29,174.123.249.96/29,174.123.250.8/29,174.123.254.24/29,174.132.50.0/29,174.132.51.0/29,174.132.62.80/29,174.132.62.112/29,174.132.90.64/29,174.132.184.80/29,174.132.225.96/29,174.132.227.40/29,174.132.230.224/29,174.132.238.8/29,174.132.238.24/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000442; rev:2307;) drop ip [174.133.5.48/29,174.133.16.136/29,174.133.16.224/29,174.133.17.152/29,174.133.17.232/29,174.133.18.56/29,174.133.18.72/29,174.133.26.144/29,174.133.32.88/29,174.133.32.184/29,174.133.33.48/29,174.133.39.232/29,174.133.45.8/29,174.133.45.232/29,174.133.46.48/29,174.133.46.72/29,174.133.64.88/29,174.133.64.96/29,174.133.69.152/29,174.133.73.176/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000443; rev:2307;) drop ip [174.133.73.232/29,174.133.74.144/29,174.133.80.8/29,174.133.81.192/28,174.133.83.48/29,174.133.83.96/29,174.133.83.112/28,174.133.83.136/29,174.133.83.160/29,174.133.83.176/29,174.133.83.224/29,174.133.98.136/29,174.133.108.216/29,174.133.112.112/28,174.133.112.176/28,174.133.114.88/29,174.133.115.144/29,174.133.121.200/29,174.133.126.192/29,174.133.128.216/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000444; rev:2307;) drop ip [174.133.137.48/28,174.133.137.64/26,174.133.137.128/26,174.133.148.64/29,174.133.152.0/28,174.133.152.24/29,174.133.172.88/29,174.133.177.48/29,174.133.195.0/28,174.133.196.184/29,174.133.196.224/29,174.133.199.72/29,174.133.201.240/29,174.133.204.0/29,174.133.205.168/29,174.133.205.224/28,174.133.205.248/29,174.133.206.32/28,174.133.211.0/29,174.133.211.200/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000445; rev:2307;) drop ip [174.133.218.248/29,174.133.220.0/29,174.133.231.160/29,174.133.241.32/29,174.133.242.24/29,174.133.242.176/29,174.133.243.184/29,174.133.254.112/29,174.133.254.192/28,174.142.99.160/29,174.142.99.184/29,174.142.99.200/29,207.44.167.64/28,207.44.255.160/28,207.218.203.48/29,207.218.230.8/29,209.62.63.0/28,209.85.23.48/29,209.85.25.248/29,209.130.152.234/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000446; rev:2307;) drop ip [216.12.223.96/28,216.40.239.64/29,216.40.239.112/29,216.40.239.144/29,63.241.136.201/25,68.178.206.94/25,72.22.23.62/25,72.22.24.224/27,72.22.25.0/27,63.241.136.201/25,68.178.206.94/25,72.22.23.62/25,72.22.23.62/25,72.22.24.224/27,72.22.25.0/27,63.241.136.201/25,68.178.206.94/25,72.22.23.62/25,72.22.24.224/27,72.22.25.0/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000447; rev:2307;) drop ip [68.178.206.94/25,72.22.23.62/25,72.22.23.62/25,72.22.24.224/27,72.22.25.0/27,63.241.136.201/25,68.178.206.94/25,72.22.23.62/25,72.22.24.224/27,72.22.25.0/27,63.145.40.0/24,63.145.249.192/27,64.95.143.208/29,64.95.143.208/29,65.115.95.0/24,65.116.90.0/24,65.116.92.0/22,66.237.61.0/27,67.128.101.0/24,68.121.107.128/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000448; rev:2307;) drop ip [68.178.254.204/25,69.22.140.0/24,69.22.178.0/24,69.22.180.0/22,69.227.251.0/27,72.166.127.0/24,74.201.85.128/26,74.201.112.64/26,74.201.112.128/25,74.201.115.0/24,74.201.117.0/25,74.201.121.192/26,74.201.124.192/28,74.201.124.208/31,74.201.124.210/25,74.201.124.211/25,74.201.124.212/30,74.201.124.216/29,74.201.124.224/27,74.217.79.0/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000449; rev:2307;) drop ip [74.217.79.64/26,75.42.252.48/29,75.42.252.56/29,75.98.0.0/26,75.98.1.0/26,75.98.2.64/26,208.36.122.104/29,208.36.122.112/28,208.47.142.0/23,208.109.182.192/25,209.204.130.0/24,209.204.190.0/24,38.99.76.0/22,61.18.170.0/24,63.145.40.0/24,63.145.249.192/27,63.147.60.0/24,56.0.0.0/8,87.32.0.0/12,34.0.0.0/8] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000450; rev:2307;) drop ip [63.150.80.0/24,63.152.90.0/24,64.7.192.0/19,64.62.145.64/27,64.62.145.128/26,64.62.210.0/26,64.62.210.64/27,64.62.210.192/27,64.62.214.0/24,64.71.178.128/27,64.71.178.224/27,64.94.227.0/24,64.95.143.208/29,64.200.91.160/27,64.200.92.128/27,65.19.131.32/27,65.19.131.240/28,65.19.138.192/27,65.19.143.8/29,65.19.143.16/28] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000451; rev:2307;) drop ip [65.19.155.160/27,65.49.42.81/25,65.49.42.82/31,65.49.42.84/30,65.49.42.88/31,65.112.40.0/24,65.115.95.0/24,65.116.60.0/24,65.116.90.0/24,65.116.92.0/22,65.120.80.0/24,65.124.120.0/24,66.160.128.192/27,66.160.133.104/29,66.160.133.128/27,66.160.158.160/27,66.160.158.192/27,66.160.158.240/29,66.160.159.192/26,66.220.2.96/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000452; rev:2307;) drop ip [66.220.3.72/29,66.220.3.96/28,66.220.3.160/28,66.220.3.192/27,66.237.61.0/27,67.128.96.0/23,67.128.101.0/24,67.135.129.128/26,67.221.161.0/24,67.221.175.0/24,68.121.107.128/29,68.122.234.232/29,68.178.254.204/25,69.22.140.0/24,69.22.176.0/23,69.22.178.0/24,69.22.180.0/22,69.88.128.0/19,69.227.251.0/27,72.52.66.8/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000453; rev:2307;) drop ip [72.166.127.0/24,74.201.0.0/24,74.201.85.128/26,74.201.112.0/23,74.201.115.0/24,74.201.117.0/25,74.201.121.192/26,74.201.124.192/28,74.201.124.208/29,74.217.79.0/25,74.217.79.128/26,75.42.252.48/29,75.42.252.56/29,75.98.0.0/26,75.98.1.0/26,75.98.2.64/26,77.242.194.0/23,81.20.77.0/24,89.238.149.0/24,89.238.150.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000454; rev:2307;) drop ip [89.238.155.0/24,89.238.156.0/24,89.238.159.128/25,89.238.166.0/23,89.238.168.0/24,155.229.0.0/16,173.1.100.16/28,173.1.245.240/28,205.214.32.0/19,206.40.192.0/19,206.135.0.0/16,207.168.0.0/16,208.36.122.104/29,208.36.122.112/28,208.47.142.0/23,208.109.182.192/25,209.101.0.0/16,209.204.130.0/24,209.204.190.0/24,209.237.241.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000455; rev:2307;) drop ip [216.132.0.0/15,216.218.168.32/27,216.218.168.128/25,216.218.184.160/27,216.218.184.192/26,216.218.193.128/29,216.218.193.152/29,216.218.193.192/27,216.218.195.192/27,216.218.196.0/29,216.218.196.32/27,216.218.196.184/29,216.218.196.224/27,216.218.240.16/28,216.218.240.56/29,216.218.240.64/27,220.255.7.0/24,222.166.160.0/24,63.145.249.192/27,63.254.136.248/29] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000456; rev:2307;) drop ip [68.122.234.232/29,155.229.0.0/16,207.96.50.34/31,207.96.50.36/30,207.96.50.40/29,207.96.50.48/28,207.96.50.64/27,207.96.50.96/25,207.168.9.0/24,207.168.171.0/24,209.101.186.64/27,209.122.130.0/24,216.49.0.0/18,63.145.40.0/24,63.145.249.192/27,64.95.143.208/29,64.95.143.208/29,65.115.95.0/24,65.116.90.0/24,65.116.92.0/22] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000457; rev:2307;) drop ip [67.128.101.0/24,68.121.107.128/29,68.122.234.232/29,68.178.254.204/25,69.22.140.0/24,69.22.178.0/24,69.22.180.0/22,69.227.251.0/27,72.166.127.0/24,74.201.85.128/26,74.201.112.64/26,74.201.112.128/25,74.201.115.0/24,74.201.117.0/25,74.201.121.192/26,74.201.124.192/28,74.201.124.208/31,74.201.124.210/25,74.201.124.211/25,74.201.124.212/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000458; rev:2307;) drop ip [74.201.124.224/27,74.217.79.0/25,74.217.79.128/26,74.217.79.64/26,75.42.252.48/29,75.42.252.56/29,75.98.0.0/26,75.98.1.0/26,75.98.2.64/26,208.36.122.104/29,208.36.122.112/28,208.47.142.0/23,208.109.182.192/25,209.204.130.0/24,209.204.190.0/24,12.7.87.0/24,12.28.93.0/24,12.33.225.0/24,12.41.98.0/24,12.42.125.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000459; rev:2307;) drop ip [12.144.177.0/24,12.144.181.0/24,12.155.21.0/24,12.167.107.0/24,12.167.108.0/22,12.181.50.0/24,12.192.227.0/24,12.248.160.0/20,38.99.76.0/22,61.18.170.0/24,63.145.40.0/24,63.145.249.192/27,63.147.60.0/24,63.150.0.0/23,63.150.80.0/24,63.152.90.0/24,64.7.192.0/19,64.62.145.64/27,64.62.145.128/26,64.62.170.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000460; rev:2307;) drop ip [64.62.210.64/27,64.62.210.192/27,64.62.214.0/24,64.71.178.128/27,64.71.178.224/27,64.94.227.0/24,64.95.143.208/29,64.151.112.80/28,64.200.91.160/27,64.200.92.128/27,65.19.131.32/27,65.19.131.240/28,65.19.138.192/27,65.19.143.8/29,65.19.143.16/28,65.19.155.0/26,65.19.155.160/27,65.49.42.81/25,65.49.42.82/31,65.49.42.84/30] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000461; rev:2307;) drop ip [65.112.40.0/24,65.115.95.0/24,65.116.60.0/24,65.116.90.0/24,65.116.92.0/22,65.120.80.0/24,65.124.120.0/24,66.160.128.192/27,66.160.133.104/29,66.160.133.128/27,66.160.158.160/27,66.160.158.192/27,66.160.158.240/29,66.160.159.192/26,66.220.2.96/27,66.220.2.128/27,66.220.3.72/29,66.220.3.96/28,66.220.3.160/28,66.220.3.192/27] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000462; rev:2307;) drop ip [67.128.96.0/23,67.128.101.0/24,67.135.129.128/26,67.221.161.0/24,67.221.175.0/24,68.121.107.128/29,68.122.234.232/29,68.178.254.204/25,69.22.140.0/24,69.22.176.0/23,69.22.178.0/24,69.22.180.0/22,69.59.176.240/28,69.88.128.0/19,69.227.251.0/27,72.52.66.8/29,72.52.66.16/29,72.52.114.96/27,72.166.127.0/24,74.201.0.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000463; rev:2307;) drop ip [74.201.112.0/23,74.201.115.0/24,74.201.117.0/25,74.201.121.192/26,74.201.124.192/28,74.201.124.208/29,74.217.79.0/25,74.217.79.128/26,75.42.252.48/29,75.42.252.56/29,75.98.0.0/26,75.98.1.0/26,75.98.2.64/26,77.242.194.0/23,81.20.77.0/24,89.238.149.0/24,89.238.150.0/24,89.238.151.0/25,89.238.154.128/25,89.238.155.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000464; rev:2307;) drop ip [89.238.159.128/25,89.238.166.0/23,89.238.168.0/24,155.229.0.0/16,173.1.100.16/28,173.1.245.240/28,204.11.216.0/21,205.214.32.0/19,206.40.192.0/19,206.135.0.0/16,207.168.0.0/16,208.36.122.104/29,208.36.122.112/28,208.47.142.0/23,208.109.182.192/25,208.113.79.32/28,209.65.72.0/21,209.101.0.0/16,209.204.130.0/24,209.204.190.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000465; rev:2307;) drop ip [209.237.249.0/24,216.93.165.128/28,216.121.5.0/24,216.132.0.0/15,216.218.168.32/27,216.218.168.128/25,216.218.184.160/27,216.218.184.192/26,216.218.193.128/29,216.218.193.152/29,216.218.193.192/27,216.218.195.192/27,216.218.196.0/29,216.218.196.32/27,216.218.196.184/29,216.218.196.224/27,216.218.240.16/28,216.218.240.56/29,216.218.240.64/27,222.166.160.0/24] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000466; rev:2307;) drop ip [63.254.136.248/29,68.121.107.128/29,68.122.234.232/29,155.229.0.0/16,207.96.50.34/31,207.96.50.36/30,207.96.50.40/29,207.96.50.48/28,207.96.50.64/27,207.96.50.96/25,207.168.9.0/24,207.168.171.0/24,209.101.186.64/27,209.122.130.0/24,216.49.0.0/18,193.105.197.0/24,193.107.240.0/22,195.191.244.0/23,95.211.88.51/25,173.194.64.121/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000467; rev:2307;) drop ip [62.212.85.66/25,95.211.88.49/25,95.211.88.54/25,95.215.62.224/25,95.215.62.26/25,173.194.64.141/25,109.235.55.11/25,115.86.191.52/25,85.112.112.6/25,85.25.130.224/25,208.83.20.164/25,213.152.170.249/25,88.190.23.36/25,193.107.16.156/25,83.149.126.97/25,95.215.62.5/25,216.172.180.249/25,89.149.242.175/25,195.54.164.83/25,81.201.31.196/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000468; rev:2307;) drop ip [212.48.192.26/25,217.29.21.23/25,208.95.173.194/25,66.232.127.2/25,193.34.145.85/25,91.218.38.132/25,194.71.107.15/25,93.158.65.211/25,62.149.24.66/25,209.44.103.29/25,208.71.113.167/25,91.199.108.149/25,184.22.62.51/25,69.43.161.152/25,208.87.149.250/25,67.21.232.14/25,94.185.80.154/25,82.98.86.171/25,208.95.172.130/25,68.71.37.146/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000469; rev:2307;) drop ip [46.19.137.186/25,62.149.12.49/25,208.95.172.132/25,141.0.173.42/25,141.0.173.46/25,141.0.173.69/25,207.67.21.250/25,65.254.250.114/25,93.170.52.30/25,208.73.210.29/25,83.233.30.33/25,85.17.79.55/25,62.149.24.67/25,69.43.161.181/25,173.201.216.32/25,74.113.68.18/25,85.159.232.250/25,195.144.21.227/25,94.247.172.115/25,93.158.65.207/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000470; rev:2307;) drop ip [95.215.62.220/25,194.28.157.162/25,67.21.232.83/25,81.17.21.122/25,88.80.7.41/25,66.23.239.98/25,80.67.6.229/25,209.44.121.211/25,192.121.86.170/25,62.149.24.93/25,67.215.242.138/25,67.215.242.139/25,174.129.43.152/25,91.121.60.42/25,88.80.22.17/25,95.211.37.229/25,174.129.205.15/25,81.176.76.133/25,193.232.159.145/25,193.232.159.144/25] any -> $HOME_NET any (msg:"ET DROP Spamhaus DROP Listed Traffic Inbound"; reference:url,www.spamhaus.org/drop/drop.lasso; threshold: type limit, track by_dst, seconds 3600, count 1; classtype:misc-attack; flowbits:set,ET.Evil; flowbits:set,ET.DROPIP; sid:2404000471; rev:2307;)