Files
geedge-jira/attachment/59099/ThunderVPN.json
2025-09-14 22:00:20 +00:00

1061 lines
18 KiB
JSON

{
"signatures": [
{
"signature_id": 393,
"signature_name": "ThunderVPN_fqdn_20240614",
"and_conditions": [
{
"or_conditions": [
{
"lua_profile_id": 0,
"attribute_type": "string",
"attribute_name": "common.server_fqdn",
"source_object_ids": [
4543
],
"protocol": "common"
}
],
"not_flag": 0
}
],
"signature_desc": "",
"icon_color": ""
},
{
"signature_id": 372,
"signature_name": "ThunderVPN_ip_20240612",
"and_conditions": [
{
"or_conditions": [
{
"lua_profile_id": 0,
"attribute_type": "ip",
"attribute_name": "ip.dst",
"source_object_ids": [
4519
],
"protocol": "ip"
}
],
"not_flag": 0
}
],
"signature_desc": "",
"icon_color": ""
}
],
"sig_objects": [
{
"id": 4543,
"type": "fqdn",
"name": "ThunderVPN_fqdn_20240614",
"vsys_id": 1,
"source_id": 4543,
"source_name": "ThunderVPN_fqdn_20240614",
"member_type": "1",
"member": {
"items": [
{
"string": {
"item_type": "fqdn",
"expr_type": 0,
"is_hexbin": 0,
"patterns": [
{
"keywords": "$thunder.free-signal.com"
}
]
}
}
]
},
"uuid": "ac4cb380-2a0f-11ef-86e5-9af1c8f7a102"
},
{
"id": 4519,
"type": "ip",
"name": "ThunderVPN_ip_20240612",
"sub_type": "ip",
"vsys_id": 1,
"source_id": 4519,
"source_name": "ThunderVPN_ip_20240612",
"member_type": "1",
"member": {
"items": [
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "146.59.34.248"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "146.59.95.74"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "146.59.93.128"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.159.179.54"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "151.115.73.224"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "163.172.132.86"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.15.106.218"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.15.246.254"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "163.172.144.131"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.158.161.134"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "135.125.239.66"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.158.189.19"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "162.19.249.189"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "104.244.77.249"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "104.244.79.109"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "54.38.156.111"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "104.244.75.33"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "141.95.18.18"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "145.239.88.235"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "193.38.139.73"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "193.38.139.123"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "62.216.92.181"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "89.31.126.201"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "89.31.126.123"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "212.192.12.35"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "89.31.126.234"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "15.204.9.177"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "52.221.231.233"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "18.130.253.120"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "54.199.253.161"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "3.121.112.107"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.235.16.118"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "45.90.57.56"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "104.244.77.124"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "45.90.57.93"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "52.66.18.44"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "185.160.26.188"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.233.231.71"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "54.202.4.29"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "3.135.203.1"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "45.61.187.101"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "199.195.251.22"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "54.89.154.62"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "107.189.10.67"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "45.90.57.215"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.231.214.165"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "3.12.164.171"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "164.132.229.134"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "5.34.179.83"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "194.87.39.26"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "54.212.37.195"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.81.210.250"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "135.148.148.56"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "15.222.249.235"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "18.207.121.107"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "145.239.95.31"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "18.184.134.246"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "38.54.57.188"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "34.244.121.84"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.124.90.69"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "3.35.236.20"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "135.125.75.111"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.229.95.143"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.229.55.165"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "5.181.4.5"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.229.55.20"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "35.180.21.39"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.126.90.72"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "158.69.48.65"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "18.193.81.191"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.238.115.134"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.15.104.0"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "205.185.118.57"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "35.177.254.240"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "199.19.226.187"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "198.98.51.240"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "198.98.48.58"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "209.141.47.216"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "209.141.51.240"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "209.141.41.122"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "198.98.52.13"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "174.136.206.197"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "174.136.206.152"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.195.216.145"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "154.3.36.90"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "15.204.89.151"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.81.222.102"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "162.19.153.141"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.195.102.60"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "198.244.188.249"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.38.65.228"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "198.244.232.119"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "141.95.17.246"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "199.19.225.153"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.195.218.61"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.79.64.248"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "199.195.253.92"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.79.66.109"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.79.64.152"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "199.195.253.91"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "198.98.49.173"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.195.218.65"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.75.67.93"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.75.68.17"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.75.72.61"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "54.255.211.151"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "54.169.106.66"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.212.32.255"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.250.23.231"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.235.244.4"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "65.0.102.59"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.234.59.117"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.125.230.181"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "54.169.106.66"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "3.35.175.178"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "13.115.7.143"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "3.112.253.204"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "104.244.72.212"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "52.37.47.50"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "54.167.92.62"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "3.99.180.40"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "5.34.179.131"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "18.219.126.78"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "51.195.202.32"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "35.157.82.144"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "18.195.216.15"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "135.125.237.178"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "15.204.240.189"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "18.130.160.19"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "54.37.17.80"
}
},
{
"ip": {
"addr_type": 4,
"port": "0-65535",
"ip_address": "15.204.58.134"
}
}
]
},
"uuid": "e324a2a0-23fd-11ef-ae5c-8e1afca25135"
}
],
"applications": [
{
"app_id": 15064,
"app_name": "ThunderVPN",
"app_longname": "",
"description": "website: https://thunder.free-signal.com/\ngoogleplay: https://play.google.com/store/apps/details?id=com.fast.free.unblock.thunder.vpn",
"seq_no": 15178,
"app_properties": {
"parent_app_id": 0,
"parent_app_name": "null",
"category": "business-systems",
"subcategory": "auth-service",
"content": "voice-call",
"risk": "1",
"characteristics": "",
"deny_action": {
"method": "drop",
"after_n_packets": 0,
"send_icmp_unreachable": 0,
"send_tcp_reset": 0
},
"continue_scanning": 0,
"tcp_timeout": 0,
"udp_timeout": 0,
"tcp_half_close": 0,
"tcp_time_wait": 0
},
"app_surrogates": [
{
"group_by": "session",
"time_window": 0,
"ordered_match": "no",
"signature_sequence": [
{
"signature": "ThunderVPN_ip_20240612",
"exclude": 0
}
]
},
{
"group_by": "session",
"time_window": 0,
"ordered_match": "no",
"signature_sequence": [
{
"signature": "ThunderVPN_fqdn_20240614",
"exclude": 0
}
]
}
]
}
]
}