{
  "description": "Event contains one or more entries part of the Shared Address Space CIDR blocks (RFC 6598)",
  "list": [
    "100.64.0.0/10"
  ],
  "matching_attributes": [
    "ip-src",
    "ip-dst",
    "domain|ip",
    "ip-dst|port",
    "ip-src|port"
  ],
  "name": "List of RFC 6598 CIDR blocks",
  "type": "cidr",
  "version": 5
}