alert ip any any <> any any (msg: "////P_SCE_NET aerverblished; app-layer-event:applayer_mismatch_protocol_both_directions flowvnt:nt,issetmismatch_protoctch_protocol_both_d8.0/24,89.248.167.0/24,106.75.18.0Ƕ0/24,89.248K14] any -> $HOME_NET any (msg:"ET DROP Dshield Block Lict)d Soure gmoup 1"; ret)
