alert ip any tny,,2226,8,, -> any !ny (app-layer-event:applayer_mismatc,10tny,,2226,8,, -> any !ny (app-l::,::E?24RI6.75.18M:,::,any,::-::E24,10::,::E/24RI6.75.18.0>24,117..0/24,89.248.117..0/24,89.248.172.0/24] any -> $ aoy (28;)