214 lines
4.0 KiB
JSON
214 lines
4.0 KiB
JSON
{
|
|
"signatures": [
|
|
{
|
|
"signature_id": 7650,
|
|
"signature_name": "StartVPN_fqdn_20241118",
|
|
"and_conditions": [
|
|
{
|
|
"or_conditions": [
|
|
{
|
|
"lua_profile_id": 0,
|
|
"attribute_type": "string",
|
|
"attribute_name": "common.server_fqdn",
|
|
"source_object_ids": [
|
|
185080
|
|
],
|
|
"protocol": "common"
|
|
}
|
|
],
|
|
"not_flag": 0
|
|
}
|
|
],
|
|
"signature_desc": "",
|
|
"icon_color": ""
|
|
},
|
|
{
|
|
"signature_id": 7649,
|
|
"signature_name": "StartVPN_ip_20241118",
|
|
"and_conditions": [
|
|
{
|
|
"or_conditions": [
|
|
{
|
|
"lua_profile_id": 0,
|
|
"attribute_type": "ip",
|
|
"attribute_name": "ip.dst",
|
|
"source_object_ids": [
|
|
185081
|
|
],
|
|
"protocol": "ip"
|
|
}
|
|
],
|
|
"not_flag": 0
|
|
}
|
|
],
|
|
"signature_desc": "",
|
|
"icon_color": ""
|
|
}
|
|
],
|
|
"sig_objects": [
|
|
{
|
|
"id": 185080,
|
|
"type": "fqdn",
|
|
"name": "StartVPN_fqdn_20241118",
|
|
"vsys_id": 1,
|
|
"source_id": 185080,
|
|
"source_name": "StartVPN_fqdn_20241118",
|
|
"member_type": "item",
|
|
"member": {
|
|
"items": [
|
|
{
|
|
"string": {
|
|
"item_type": "fqdn",
|
|
"expr_type": 0,
|
|
"is_hexbin": 0,
|
|
"patterns": [
|
|
{
|
|
"keywords": "*.api.vpnstart.net"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"string": {
|
|
"item_type": "fqdn",
|
|
"expr_type": 0,
|
|
"is_hexbin": 0,
|
|
"patterns": [
|
|
{
|
|
"keywords": "*.starvpnapp.com"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"uuid": "cae114bd25a14d249e7d0854e5cb5e35",
|
|
"statistics_option": "none"
|
|
},
|
|
{
|
|
"id": 185081,
|
|
"type": "ip",
|
|
"name": "StartVPN_ip_20241118",
|
|
"sub_type": "ip",
|
|
"vsys_id": 1,
|
|
"source_id": 185081,
|
|
"source_name": "StartVPN_ip_20241118",
|
|
"member_type": "item",
|
|
"member": {
|
|
"items": [
|
|
{
|
|
"ip": {
|
|
"addr_type": 4,
|
|
"port": "0-65535",
|
|
"ip_address": "213.202.219.137"
|
|
}
|
|
},
|
|
{
|
|
"ip": {
|
|
"addr_type": 4,
|
|
"port": "0-65535",
|
|
"ip_address": "217.23.5.104"
|
|
}
|
|
},
|
|
{
|
|
"ip": {
|
|
"addr_type": 4,
|
|
"port": "0-65535",
|
|
"ip_address": "5.161.61.115"
|
|
}
|
|
},
|
|
{
|
|
"ip": {
|
|
"addr_type": 4,
|
|
"port": "0-65535",
|
|
"ip_address": "51.159.103.127"
|
|
}
|
|
},
|
|
{
|
|
"ip": {
|
|
"addr_type": 4,
|
|
"port": "0-65535",
|
|
"ip_address": "51.159.23.202"
|
|
}
|
|
},
|
|
{
|
|
"ip": {
|
|
"addr_type": 4,
|
|
"port": "0-65535",
|
|
"ip_address": "51.195.6.206"
|
|
}
|
|
},
|
|
{
|
|
"ip": {
|
|
"addr_type": 4,
|
|
"port": "0-65535",
|
|
"ip_address": "51.75.68.243"
|
|
}
|
|
},
|
|
{
|
|
"ip": {
|
|
"addr_type": 4,
|
|
"port": "0-65535",
|
|
"ip_address": "95.217.22.59"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"uuid": "8140f9ab-9441-11ef-94f7-0242ac120022",
|
|
"statistics_option": "none"
|
|
}
|
|
],
|
|
"applications": [
|
|
{
|
|
"app_id": 16517,
|
|
"app_name": "StartVPN_20241118",
|
|
"app_longname": "StartVPN_20241118",
|
|
"description": "Google Play https://play.google.com/store/apps/details?id=istark.vpn.starkreloaded&hl=en_US",
|
|
"seq_no": 16517,
|
|
"app_properties": {
|
|
"parent_app_id": 0,
|
|
"parent_app_name": "null",
|
|
"category": "networking",
|
|
"subcategory": "tunnels",
|
|
"content": "unknown",
|
|
"risk": "1",
|
|
"characteristics": "",
|
|
"deny_action": {
|
|
"method": "drop",
|
|
"after_n_packets": 0,
|
|
"send_icmp_unreachable": 1,
|
|
"send_tcp_reset": 1
|
|
},
|
|
"continue_scanning": 0,
|
|
"tcp_timeout": 0,
|
|
"udp_timeout": 0,
|
|
"tcp_half_close": 0,
|
|
"tcp_time_wait": 0
|
|
},
|
|
"app_surrogates": [
|
|
{
|
|
"group_by": "session",
|
|
"time_window": 0,
|
|
"ordered_match": "no",
|
|
"signature_sequence": [
|
|
{
|
|
"signature": "StartVPN_ip_20241118",
|
|
"exclude": 0
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"group_by": "session",
|
|
"time_window": 0,
|
|
"ordered_match": "no",
|
|
"signature_sequence": [
|
|
{
|
|
"signature": "StartVPN_fqdn_20241118",
|
|
"exclude": 0
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
} |