alert ip any any -> 46.10.197.206 any (msg:"Suspicious Traffic - Volt Typhoon - 46.10.197.206"; content:"Volt Typhoon"; sid:100001; rev:1;)
alert ip 46.10.197.206 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 46.10.197.206"; content:"Volt Typhoon"; sid:100002; rev:1;)

alert ip any any -> 176.102.35.175 any (msg:"Suspicious Traffic - Volt Typhoon - 176.102.35.175"; content:"Volt Typhoon"; sid:100003; rev:1;)
alert ip 176.102.35.175 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 176.102.35.175"; content:"Volt Typhoon"; sid:100004; rev:1;)

alert ip any any -> 93.62.0.77 any (msg:"Suspicious Traffic - Volt Typhoon - 93.62.0.77"; content:"Volt Typhoon"; sid:100005; rev:1;)
alert ip 93.62.0.77 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 93.62.0.77"; content:"Volt Typhoon"; sid:100006; rev:1;)

alert ip any any -> 194.50.159.3 any (msg:"Suspicious Traffic - Volt Typhoon - 194.50.159.3"; content:"Volt Typhoon"; sid:100007; rev:1;)
alert ip 194.50.159.3 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 194.50.159.3"; content:"Volt Typhoon"; sid:100008; rev:1;)

alert ip any any -> 80.64.80.169 any (msg:"Suspicious Traffic - Volt Typhoon - 80.64.80.169"; content:"Volt Typhoon"; sid:100009; rev:1;)
alert ip 80.64.80.169 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 80.64.80.169"; content:"Volt Typhoon"; sid:100010; rev:1;)

alert ip any any -> 24.212.225.54 any (msg:"Suspicious Traffic - Volt Typhoon - 24.212.225.54"; content:"Volt Typhoon"; sid:100011; rev:1;)
alert ip 24.212.225.54 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 24.212.225.54"; content:"Volt Typhoon"; sid:100012; rev:1;)

alert ip any any -> 208.97.106.10 any (msg:"Suspicious Traffic - Volt Typhoon - 208.97.106.10"; content:"Volt Typhoon"; sid:100013; rev:1;)
alert ip 208.97.106.10 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 208.97.106.10"; content:"Volt Typhoon"; sid:100014; rev:1;)

alert ip any any -> 70.60.30.222 any (msg:"Suspicious Traffic - Volt Typhoon - 70.60.30.222"; content:"Volt Typhoon"; sid:100015; rev:1;)
alert ip 70.60.30.222 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 70.60.30.222"; content:"Volt Typhoon"; sid:100016; rev:1;)

alert ip any any -> 184.67.141.110 any (msg:"Suspicious Traffic - Volt Typhoon - 184.67.141.110"; content:"Volt Typhoon"; sid:100017; rev:1;)
alert ip 184.67.141.110 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 184.67.141.110"; content:"Volt Typhoon"; sid:100018; rev:1;)

alert ip any any -> 202.22.227.179 any (msg:"Suspicious Traffic - Volt Typhoon - 202.22.227.179"; content:"Volt Typhoon"; sid:100019; rev:1;)
alert ip 202.22.227.179 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 202.22.227.179"; content:"Volt Typhoon"; sid:100020; rev:1;)

alert ip any any -> 49.204.75.92 any (msg:"Suspicious Traffic - Volt Typhoon - 49.204.75.92"; content:"Volt Typhoon"; sid:100021; rev:1;)
alert ip 49.204.75.92 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 49.204.75.92"; content:"Volt Typhoon"; sid:100022; rev:1;)

alert ip any any -> 61.2.141.161 any (msg:"Suspicious Traffic - Volt Typhoon - 61.2.141.161"; content:"Volt Typhoon"; sid:100023; rev:1;)
alert ip 61.2.141.161 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 61.2.141.161"; content:"Volt Typhoon"; sid:100024; rev:1;)

alert ip any any -> 49.204.75.90 any (msg:"Suspicious Traffic - Volt Typhoon - 49.204.75.90"; content:"Volt Typhoon"; sid:100025; rev:1;)
alert ip 49.204.75.90 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 49.204.75.90"; content:"Volt Typhoon"; sid:100026; rev:1;)

alert ip any any -> 114.143.222.242 any (msg:"Suspicious Traffic - Volt Typhoon - 114.143.222.242"; content:"Volt Typhoon"; sid:100027; rev:1;)
alert ip 114.143.222.242 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 114.143.222.242"; content:"Volt Typhoon"; sid:100028; rev:1;)

alert ip any any -> 117.211.166.22 any (msg:"Suspicious Traffic - Volt Typhoon - 117.211.166.22"; content:"Volt Typhoon"; sid:100029; rev:1;)
alert ip 117.211.166.22 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 117.211.166.22"; content:"Volt Typhoon"; sid:100030; rev:1;)

alert ip any any -> 49.204.65.90 any (msg:"Suspicious Traffic - Volt Typhoon - 49.204.65.90"; content:"Volt Typhoon"; sid:100031; rev:1;)
alert ip 49.204.65.90 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 49.204.65.90"; content:"Volt Typhoon"; sid:100032; rev:1;)

alert ip any any -> 49.204.73.250 any (msg:"Suspicious Traffic - Volt Typhoon - 49.204.73.250"; content:"Volt Typhoon"; sid:100033; rev:1;)
alert ip 49.204.73.250 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 49.204.73.250"; content:"Volt Typhoon"; sid:100034; rev:1;)

alert ip any any -> 192.149.47.110 any (msg:"Suspicious Traffic - Volt Typhoon - 192.149.47.110"; content:"Volt Typhoon"; sid:100035; rev:1;)
alert ip 192.149.47.110 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 192.149.47.110"; content:"Volt Typhoon"; sid:100036; rev:1;)

alert ip any any -> 212.11.106.139 any (msg:"Suspicious Traffic - Volt Typhoon - 212.11.106.139"; content:"Volt Typhoon"; sid:100037; rev:1;)
alert ip 212.11.106.139 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 212.11.106.139"; content:"Volt Typhoon"; sid:100038; rev:1;)

alert ip any any -> 89.203.140.246 any (msg:"Suspicious Traffic - Volt Typhoon - 89.203.140.246"; content:"Volt Typhoon"; sid:100039; rev:1;)
alert ip 89.203.140.246 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 89.203.140.246"; content:"Volt Typhoon"; sid:100040; rev:1;)

alert ip any any -> 94.125.218.19 any (msg:"Suspicious Traffic - Volt Typhoon - 94.125.218.19"; content:"Volt Typhoon"; sid:100041; rev:1;)
alert ip 94.125.218.19 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 94.125.218.19"; content:"Volt Typhoon"; sid:100042; rev:1;)

alert ip any any -> 183.82.110.178 any (msg:"Suspicious Traffic - Volt Typhoon - 183.82.110.178"; content:"Volt Typhoon"; sid:100043; rev:1;)
alert ip 183.82.110.178 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 183.82.110.178"; content:"Volt Typhoon"; sid:100044; rev:1;)

alert ip any any -> 117.239.157.74 any (msg:"Suspicious Traffic - Volt Typhoon - 117.239.157.74"; content:"Volt Typhoon"; sid:100045; rev:1;)
alert ip 117.239.157.74 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 117.239.157.74"; content:"Volt Typhoon"; sid:100046; rev:1;)

alert ip any any -> 210.212.224.124 any (msg:"Suspicious Traffic - Volt Typhoon - 210.212.224.124"; content:"Volt Typhoon"; sid:100047; rev:1;)
alert ip 210.212.224.124 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 210.212.224.124"; content:"Volt Typhoon"; sid:100048; rev:1;)

alert ip any any -> 109.166.39.139 any (msg:"Suspicious Traffic - Volt Typhoon - 109.166.39.139"; content:"Volt Typhoon"; sid:100049; rev:1;)
alert ip 109.166.39.139 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 109.166.39.139"; content:"Volt Typhoon"; sid:100050; rev:1;)

alert ip any any -> 23.227.198.247 any (msg:"Suspicious Traffic - Volt Typhoon - 23.227.198.247"; content:"Volt Typhoon"; sid:100051; rev:1;)
alert ip 23.227.198.247 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 23.227.198.247"; content:"Volt Typhoon"; sid:100052; rev:1;)

alert ip any any -> 104.161.54.203 any (msg:"Suspicious Traffic - Volt Typhoon - 104.161.54.203"; content:"Volt Typhoon"; sid:100053; rev:1;)
alert ip 104.161.54.203 any -> any any (msg:"Suspicious Traffic - Volt Typhoon - 104.161.54.203"; content:"Volt Typhoon"; sid:100054; rev:1;)