alert ip [69.5.169.0/24,193.163.125.0/24,66.132.186.0/24,148.59.129.0/24,195.184.76.0/24,205.210.31.0/24,147.185.132.0/24,185.242.226.0/24,64.62.197.0/24,45.198.224.0/24,45.148.10.0/24,167.94.145.0/24,66.132.172.0/24,198.235.24.0/24,85.217.149.0/24,167.94.146.0/24,85.217.140.0/24,5.226.140.0/24,86.38.187.0/24,66.240.236.0/24] any -> $HOME_NET any (msg:"ET DROP Dshield Block Listed Source group 1"; reference:url,feeds.dshield.org/block.txt; classtype:misc-attack; sid:2402000; rev:7892; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag Dshield, signature_severity Major, created_at 2010_12_30, updated_at 2026_10_14;)