{
	"signatures": [
		{
			"andConditions": [
				{
					"notFlag": 0,
					"orConditions": [
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "47.91.105.57",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.101.110.225",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "167.71.184.34",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.207",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "220.181.174.2",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.162",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "74.119.195.118",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.232",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.150",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "77.91.123.211",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "142.251.42.238",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.101.110.255",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.218",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.223",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.222",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.223",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.204",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "162.243.189.2",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.101.109.44",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.231",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "77.91.123.213",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.10",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.146",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.180.79.202",
							"port": "0-65535",
							"protocol": "0"
						}
					]
				}
			],
			"iconColor": "",
			"signatureDesc": "",
			"signatureId": 714682,
			"signatureName": "HotSpot_VPN_serverip"
		},
		{
			"andConditions": [
				{
					"notFlag": 0,
					"orConditions": [
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "right",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "nterry.info"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "right",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": ".digitaloceanspaces.com"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "right",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": ".doubleclick.net"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "right",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": ".appsflyer.com"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "45.144.29.78"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "74.119.195.118"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "5.180.79.207"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "77.91.123.211"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "5.180.79.223"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "5.180.79.222"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "5.180.79.231"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "5.180.79.218"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "77.91.123.213"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "5.180.79.231"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "5.180.79.218"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "5.180.79.10"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "5.180.79.146"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "complete",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "5.180.79.202"
								}
							]
						}
					]
				}
			],
			"iconColor": "",
			"signatureDesc": "",
			"signatureId": 714681,
			"signatureName": "HotSpot_VPN-sni"
		}
	],
	"applications": [
		{
			"appName": "HotSpot_VPN",
			"appLongname": "HotSpot_VPN",
			"appId": 1059885,
			"description": "",
			"appProperties": {
				"category": "business-systems",
				"characteristics": "",
				"continueScanning": 0,
				"denyAction": {
					"method": "drop",
					"after_n_packets": 0,
					"send_icmp_unreachable": 0,
					"send_tcp_reset": 0
				},
				"parentAppId": 0,
				"parentAppName": "",
				"risk": "1",
				"subcategory": "auth-service",
				"tcpHalfClose": 0,
				"tcpTimeWait": 0,
				"tcpTimeout": 0,
				"technology": "browser-based",
				"udpTimeout": 0
			},
			"appSurrogates": [
				{
					"group_by": "session",
					"ordered_match": "no",
					"signature_sequence": [
						{
							"signature": "HotSpot_VPN-sni",
							"exclude": 0
						}
					],
					"time_window": 0
				},
				{
					"group_by": "session",
					"ordered_match": "no",
					"signature_sequence": [
						{
							"signature": "HotSpot_VPN_serverip",
							"exclude": 0
						}
					],
					"time_window": 0
				}
			],
			"seqNo": 1059839,
			"opUser": -1
		}
	]
}