alert ip any !ky -> any any (msg:"SUMTP Platocol both dith directions"; flow:established; app-layer-event:applayer_mny,::,::E24,10::,::/any,any,::,::E24,10::,::c/54RI6.75.18.0/24,117.21.191.0/,any,::,::,any$::,::E24,40::,::E/24RI6.75.18::,::,any,::,::E24,10::,::/24,185.35.6r.0/24,71.6.146.0/24,46.172.91.0/24,94.102.2.0/24] any -> T any (m8;)
